You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/byoip/get-started.mdx
+36-19Lines changed: 36 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,26 +13,44 @@ Once your account configurations are in place, consider the sections below to le
13
13
14
14
## Before you begin
15
15
16
-
* Verify that your [Internet Routing Registry (IRR)](/byoip/concepts/irr-entries/) records are up to date and contain:
16
+
- Your prefix must be registered under one of the following Regional Internet Registries (RIRs):
17
17
18
-
*`route` or `route6` objects matching the exact prefixes you want to onboard
19
-
*`origin` matching the correct ASN you want to onboard
18
+
- ARIN
19
+
- RIPE
20
+
- APNIC
21
+
- AFRINIC
22
+
- LACNIC
23
+
24
+
- Also verify that your [Internet Routing Registry (IRR)](/byoip/concepts/irr-entries/) records are are up to date and contain:
25
+
26
+
-`route` or `route6` objects matching the exact prefixes you want to onboard
27
+
-`origin` matching the correct ASN you want to onboard
20
28
21
29
:::note
22
30
The process described on this page only supports using Cloudflare's ASN (AS13335). If you must announce the prefixes under your own ASN, contact your account team.
23
31
:::
24
32
25
-
* You must use Resource Public Key Infrastructure (RPKI) validation and make sure your ROAs are accurate. You can use [Cloudflare's RPKI Portal](https://rpki.cloudflare.com/?view=validator) and a second source such as [Routinator](https://rpki-validator.ripe.net/ui/) to double-check your prefixes.
33
+
- You must use Resource Public Key Infrastructure (RPKI) validation and make sure your ROAs are accurate. You can use [Cloudflare's RPKI Portal](https://rpki.cloudflare.com/?view=validator) and a second source such as [Routinator](https://rpki-validator.ripe.net/ui/) to double-check your prefixes.
26
34
27
-
* If you are not familiar with how Cloudflare API works, refer to [Fundamentals](/fundamentals/api/). Make sure you have the necessary permissions and that you have your account ID.
35
+
- If you are not familiar with how Cloudflare API works, refer to [Fundamentals](/fundamentals/api/). Make sure you have the necessary permissions and that you have your account ID.
28
36
29
37
## 1. Set up your prefixes
30
38
31
39
1. Use the [Add Prefix endpoint](/api/resources/addressing/subresources/prefixes/methods/create/) to create a prefix in the Cloudflare account that should own the BYOIP prefix.
@@ -63,18 +79,18 @@ Once your account configurations are in place, consider the sections below to le
63
79
64
80
<Tabs> <TabItem label="Modify IRR record">
65
81
66
-
1. Copy the token returned by the API call.
82
+
1. Copy the `ownership_validation_token` returned by the API call.
67
83
2. On the IRR record of the prefix you are onboarding, add the following string in either a `description` or `remarks` field. Replace `<TOKEN>` by the actual token you copied in the previous step.
68
84
69
85
```
70
86
cf-validation: <TOKEN>
71
87
```
72
88
73
-
:::note
89
+
:::note
74
90
75
-
The exact steps to update your IRR record will depend on the registry you are using. Refer to [Internet Routing Registry (IRR)](/byoip/concepts/irr-entries/) for details.
91
+
The exact steps to update your IRR record will depend on the registry you are using. Refer to [Internet Routing Registry (IRR)](/byoip/concepts/irr-entries/best-practices/) for details.
76
92
77
-
:::
93
+
:::
78
94
79
95
</TabItem> <TabItem label="Reverse DNS zone and TXT record">
80
96
@@ -93,10 +109,11 @@ cf-validation.<REVERSE_ZONE_ADDRESS> IN TXT <TOKEN>
93
109
94
110
4. Update nameservers at your Regional Internet Registry (RIR).The exact steps to update your nameservers will depend on the registry you are using.
95
111
96
-
Once the ownership validation is successful, and if the RPKI and IRR validations also pass, the `approved` field in your prefix will return "V". This means you can proceed to create IP address service bindings[^1].
97
-
98
112
</TabItem> </Tabs>
99
113
114
+
115
+
Once the ownership validation is successful, and if the RPKI and IRR validations also pass, the `approved` field in your prefix will return `"V"`. This means you can proceed to create IP address service bindings[^1].
116
+
100
117
3. (Optional) Use the [Prefix Details endpoint](/api/resources/addressing/subresources/prefixes/methods/get/) to check if any issues were found during validation. If so, proceed with the necessary changes and make a request to restart validation.
0 commit comments