You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/waf/tools/ip-access-rules/parameters.mdx
+9-14Lines changed: 9 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,6 @@ sidebar:
6
6
head:
7
7
- tag: title
8
8
content: IP Access rule parameters
9
-
10
9
---
11
10
12
11
An IP Access rule will apply a certain action to incoming traffic based on the visitor's IP address, IP range, country, or Autonomous System Number (ASN).
@@ -20,8 +19,6 @@ An IP Access rule will apply a certain action to incoming traffic based on the v
20
19
21
20
## IP range
22
21
23
-
24
-
25
22
| Type | Example value | Start of range | End of range | Number of addresses |
| IPv4 `/24` range |`192.0.2.0/24`|`192.0.2.0`|`192.0.2.255`| 256 |
@@ -30,27 +27,25 @@ An IP Access rule will apply a certain action to incoming traffic based on the v
30
27
| IPv6 `/48` range |`2001:db8::/48`|`2001:db8::`|`2001:db8:0000:ffff:ffff:ffff:ffff:ffff`| 1,208,925,819,614,629,174,706,176 |
31
28
| IPv6 `/32` range |`2001:db8::/32`|`2001:db8::`|`2001:db8:ffff:ffff:ffff:ffff:ffff:ffff`| 79,228,162,514,264,337,593,543,950,336 |
32
29
33
-
34
-
35
30
## Country
36
31
37
-
You can specify a country by name or two-letter [ISO-3166-1 alpha-2 codes](https://www.iso.org/iso-3166-country-codes.html). For example:
32
+
Specify a country using two-letter [ISO-3166-1 alpha-2 codes](https://www.iso.org/iso-3166-country-codes.html). Additionally, the Cloudflare dashboard accepts country names. For example:
38
33
39
-
*`US`
40
-
*`germany`
41
-
*`CN`
34
+
-`US`
35
+
-`CN`
36
+
-`germany` (dashboard only)
42
37
43
38
Cloudflare uses the following special country alpha-2 codes that are not part of the ISO:
- Block by country is only available on Enterprise plans.
46
+
- IP addresses globally allowed by Cloudflare will override an IP Access rule country block, but they will not override a country block via [WAF custom rules](/waf/custom-rules/).
50
47
51
-
* Block by country is only available on Enterprise plans.
52
-
* IP addresses globally allowed by Cloudflare will override an IP Access rule country block, but they will not override a country block via [WAF custom rules](/waf/custom-rules/).
0 commit comments