Let’s look into the steps to add Cloudflare IP to AWS inbound rules. Bobcares, as a part of our AWS Support Services, offers solutions to every AWS query that comes our way.

How to add Cloudflare IP to AWS inbound rules?

It is necessary to add the Cloudflare IPS to AWS EC2 security Group if Cloudflare is serving as the website’s DNS/CDN provider and the Amazon EC2 instance serving as the host. To prevent direct Internet access to the origin server, we wish to take this step. Limiting access to the web host to just Cloudflare servers enhances security.

Steps to add Cloudflare IP to AWS inbound rules

1. Firstly, we must know the current list of Cloudflare IPs. We need this so that we can include it in the ACL listing in our Amazon EC2 security group. We can find it on the Cloudflare site.

2. Now we need to visit the EC2 Dashboard, then choose Instances to view the security groups you are currently using.

3. Right-click on the EC2 instance. Then select networking >> change security groups.

The security groups will appear. The checkmarks next to them will indicate the security groups we are currently using.

4. We may now edit the security groups. So go to Network & Security >> Security Groups.

A table of the security groups will appear now.

5. Simply click on the security group to edit. Then, there will be four tabs in the table at the bottom: Description, Inbound, Outbound, and Tags.

6. Click the Inbound tab, then choose Edit since we need to add Cloudflare IP to AWS inbound rules.

The Edit inbound rules table will appear.

7. Select the Add Rule button at the bottom which makes a new row in the table for the setup.

8. Specify HTTP for the Type and Custom IP for the Source.

9. Lastly, add the Cloudflare IP addresses.  We can then remove the Any Source and 0.0.0.0/0 which will restrict any web traffic except that coming from Cloudflare.

[Searching answer to a different question? We’re available 24/7.]

Conclusion

The article provides a step-by-step description from our Support team on the process of adding Cloudflare IP to AWS inbound rules.