Skip to content

Cloudflare BYOIP Integration Overview

BYOIP SUPPORTER
ASN 13335
IPv4 support
IPv6 support
LOA support
ROA support
Process Semi-automatic
Locations supported
Ashburn, Atlanta, Chicago, Dallas, Denver, Los Angeles, Miami, New York City, Phoenix, San Jose, Seattle, Silicon Valley, Washington D.C., Toronto, Vancouver, Amsterdam, Frankfurt, London, Madrid, Milan, Paris, Stockholm, Warsaw, Zurich, Hong Kong, Jakarta, Melbourne, Mumbai, Seoul, Singapore, Sydney, Tokyo, Wellington, Buenos Aires, Lima, Mexico City, Rio de Janeiro, São Paulo, Cape Town, Johannesburg, Lagos, Nairobi, Riyadh, Tel Aviv, Dubai, Auckland

Searching for the best IP providers? Cloudflare enables global BYOIP automation, IPv4 and IPv6 support, and robust IP reputation management across enterprise-grade services. Below you’ll find Cloudflare setup documentation, BYOIP requirements, pricing, and integration steps to bring and control your own IP ranges within Cloudflare’s secure network infrastructure.

Provider Details

FieldInformation
Provider NameCloudflare
WebsiteCloudflare Website
ASN(s)13335
Regions SupportedGlobal (200+ cities); regional deployments on request
Support ContactExisting customers: Contact account team
New prospects: Email
Tech Article & DateBringing Your Own IPs to Cloudflare (BYOIP) – July 2020
BYOIP ScopeEnterprise-grade BYOIP for IPv4 and IPv6 with CDN, Spectrum, Magic Transit, and DNS integration
Supported VersionsIPv4 and IPv6
Supported ServicesCDN, WAF, Spectrum, Magic Transit, Gateway DNS, Aegis

Technical Requirements

RequirementDetails
Prefix SizeIPv4: /24 minimum
IPv6: /48 minimum
ASN Ownership RequiredNot required; Cloudflare ASN (AS13335) can be used
IRR or RADb ObjectRequired: IRR record authorizing Cloudflare
ROA or LOALOA required; ROA recommended for RPKI
RIR LimitationsSupported: ARIN, RIPE, APNIC with registered IRR entries

Step-by-Step BYOIP Process

  • Ownership Verification: Ensure IPs are registered with ARIN, RIPE, or APNIC. Add IRR entries authorizing Cloudflare (AS13335).
  • Submit LOA: Provide a Letter of Authorization detailing your prefixes and authorizing Cloudflare to announce them.
  • Prefix Onboarding: Collaborate with your Cloudflare account team to onboard IPs and configure advertisement settings.
  • Service Integration: Assign prefixes to desired services (CDN, Spectrum, Magic Transit, etc.) and use Address Maps for DNS control.

Cost and Limitations

ItemDetails
FeesNo additional charges for BYOIP; standard service pricing applies
Bundled or StandaloneBYOIP used across multiple Cloudflare services simultaneously
Traffic/Peering RestrictionsPrefixes cannot be multihomed or announced elsewhere
Other LimitationsMust onboard IPs in /24 (IPv4) or /48 (IPv6); sub-prefixes require separate onboarding

Automation & Developer Access

  • API Access: Full support via Cloudflare REST API
  • Terraform/SDK: Not officially mentioned; custom automation may be possible

Abuse & Reputation Management

  • IP Reputation Monitoring: Available via Cloudflare’s network analytics
  • Blacklist Removal Assistance: Customers are responsible for managing IP reputation

Cloudflare BYOIP Blog Post
IPXO Cloudflare Setup Guide

FAQ

BYOIP, or Bring Your Own IP, is a service that enables organizations to bring their own public IP addresses—whether owned outright or leased from an IP provider—into a service provider’s network infrastructure. Instead of relying on IP addresses assigned by the provider, BYOIP allows businesses to retain control over their IP resources. This ensures continuity, particularly for organizations with established IP-based reputations, branding, or dependencies on specific address blocks. IP providers can assist in streamlining this process, making it easy to integrate your IPs into the desired network environment.

BYOIP offers several compelling advantages. By using your own IPs, you can maintain continuity in your network’s identity, reduce the risk of disruptions to email deliverability or service recognition, and avoid reputational concerns associated with shared IPs. Additionally, BYOIP provides enhanced flexibility and control over your IP resources.

BYOIP is ideal for organizations that either own public IP addresses or lease them from a trusted IP provider with explicit BYOIP support. This includes enterprises, cloud providers, content delivery networks (CDNs), and businesses with compliance requirements or IP reputation needs. Working with a reputable IP provider ensures that leased IPs can be seamlessly integrated into another provider’s infrastructure without ownership concerns.

You must either legally own the IP addresses or have explicit authorization from a leasing IP provider to route and manage them. IP providers who offer BYOIP-ready IP addresses simplify this process, providing documentation and support to ensure compliance with regional internet registry (RIR) policies and service provider requirements. This collaboration ensures smooth implementation without any legal or operational issues.

To use BYOIP, you’ll typically need to present documentation verifying your authority over the IP block. This can include official records from a regional internet registry (RIR) such as ARIN, RIPE NCC, or APNIC. If you are leasing IPs, the IP provider should supply proof of their ownership and grant you permission for BYOIP. Providers that specialize in IP leasing often handle this paperwork for you, reducing administrative burden and ensuring compliance.

Yes, BYOIP is designed to be a secure and reliable solution. Reputable service providers and IP providers implement robust safeguards to prevent unauthorized use or hijacking of IP addresses. Security measures include BGP filtering, route validation, and advanced protocols like Resource Public Key Infrastructure (RPKI). By collaborating with a trusted IP provider, businesses can benefit from additional layers of protection, ensuring that only authorized traffic is routed through their IP blocks.

The setup process for BYOIP varies by provider, typically taking anywhere from a few hours to a few days. Factors include the complexity of your network, the verification process for IP ownership or authorization, and the time needed for global BGP route propagation. IP providers often expedite the preparation and validation stages, ensuring a smooth and timely integration into the desired infrastructure.

Absolutely. Many providers, in partnership with IP providers, support routing IPs across multiple data centers or geographic regions. This feature optimizes performance for global businesses by reducing latency and improving service availability. When working with an IP provider, you can also ensure that your leased or owned IPs are aligned with your geographic requirements for compliance and efficiency.

If you choose to discontinue BYOIP with a provider, your IP addresses will be released from their network, and routing will cease. You can then reallocate these IPs for use with a different service provider or project.