You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/byoip/get-started.mdx
+21-9Lines changed: 21 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,29 +3,38 @@ title: Get started
3
3
pcx_content_type: get-started
4
4
sidebar:
5
5
order: 2
6
-
hidden: true
7
6
---
8
7
9
-
import { GlossaryTooltip } from"~/components"
8
+
import { GlossaryTooltip } from"~/components";
10
9
11
-
To bring your own IPs, you must work with your account team to understand everything you need to ensure a smooth transition during the onboarding process.
10
+
Work with your account team to understand everything you need to ensure a smooth transition during the onboarding process.
12
11
13
-
Cloudflare requires a service-specific configuration for your prefixes, as well as some requirements common to all BYOIP customers regardless of service type. These requirements are common to all products compatible with BYOIP, such as [Magic Transit](/magic-transit/), [Spectrum](/spectrum/), and [CDN services](/cache/).
12
+
Cloudflare requires a service-specific configuration for your prefixes, as well as some requirements common to all BYOIP customers regardless of service type.
14
13
15
-
## Prerequisites
14
+
## Requirements
16
15
17
-
There are two major prerequisites before Cloudflare can begin onboarding your IP space.
16
+
The following requirements are common to all products compatible with BYOIP.
17
+
18
+
You must verify that your [Internet Routing Registry (IRR)](/byoip/concepts/irr-entries/) records are up to date and contain:
18
19
19
-
1. Cloudflare must receive a [Letter of Agency (LOA)](/byoip/concepts/loa/) to announce your prefixes, which we will share with our transit partners as evidence that we are allowed to announce the route.
20
-
2. You must verify that your [Internet Routing Registry (IRR)](/byoip/concepts/irr-entries/) records are up to date and contain:
21
20
-`route` or `route6` objects matching the exact prefixes you want to onboard
22
21
-`origin` matching the correct ASN you want to onboard
23
22
24
23
:::caution[RPKI validation]
25
24
You are not required to use <GlossaryTooltipterm="Resource Public Key Infrastructure (RPKI)">Resource Public Key Infrastructure (RPKI)</GlossaryTooltip>. However, if you do, make sure your <GlossaryTooltipterm="Route Origin Authorization (ROA)">ROAs</GlossaryTooltip> are accurate. You can use [Cloudflare's RPKI Portal](https://rpki.cloudflare.com/?view=validator) and a second source such as [Routinator](https://rpki-validator.ripe.net/ui/) to double check your prefixes.
26
25
:::
27
26
28
-
After onboarding, [Border Gateway Protocol (BGP)](https://www.cloudflare.com/learning/security/glossary/what-is-bgp/) announcements for customer prefixes can be controlled with the [Dynamic Advertisement](/byoip/concepts/dynamic-advertisement/) API or via the Cloudflare dashboard.
27
+
## Process overview
28
+
29
+
Overall, the steps can be summarized as follows:
30
+
31
+
1. You revise your [IRRs and ROAs](#requirements) (if applicable) to make sure they are correct.
32
+
2. You prepare a [letter of agency (LOA)](/byoip/concepts/loa/) containing both the prefix you are authorizing Cloudflare to announce and which ASN they will be announced under. Cloudflare will present this to our transit partners as evidence that we are allowed to announce the route.
33
+
3. You use the [Upload LOA Document](/api/resources/addressing/subresources/loa_documents/methods/create/) API endpoint to submit the letter under your account and the [Add Prefix](/api/resources/addressing/subresources/prefixes/methods/create/) endpoint to create the prefix in your account with the associated `loa_document_id`.
34
+
4. After receiving the LOA, Cloudflare validates the [requirements](#requirements) and provisions the IPs.
35
+
5. (Optional) You can use [Prefix delegations](/byoip/concepts/prefix-delegations/) to share all or part of your prefix with another Cloudflare account.
36
+
6. You use [service bindings](/byoip/service-bindings/)[^1] and [address maps](/byoip/address-maps/)[^2] to control how your IPs are used.
37
+
7. You advertise or withdraw the BGP route for a prefix via the [BGP Prefix API](/api/resources/addressing/subresources/prefixes/subresources/bgp_prefixes/methods/create/).
29
38
30
39
## Cloudflare IPs
31
40
@@ -46,3 +55,6 @@ To protect your network using a Cloudflare IP address, contact your account mana
46
55
47
56
When you use a Cloudflare-managed IP space, you do not need to provide a Letter of Agency (LOA) and advertise your prefixes that are associated with bringing your own IP.
48
57
:::
58
+
59
+
[^1]: Mappings that control through which pipeline traffic destined for a given IP address will be routed.
60
+
[^2]: Mappings that specify which IP addresses should be used when Cloudflare responds to DNS queries for proxied hostnames.
Copy file name to clipboardExpand all lines: src/content/docs/byoip/index.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,4 +18,4 @@ Get Cloudflare's security and performance while using your own IPs.
18
18
19
19
With **Bringing Your Own IPs** (BYOIP), Cloudflare announces your IPs in all our locations. Use your IPs with [Magic Transit](/magic-transit/), [Spectrum](/spectrum/), [CDN services](/cache/), or [Gateway DNS](/cloudflare-one/policies/gateway/dns-policies/).
20
20
21
-
Learn how to [get started](/byoip/get-started-review/).
0 commit comments