Cloudflare BYOIP Integration Overview
Location
Searching for the best IP providers? Cloudflare’s Enterprise-only BYOIP program lets you bring your own IPv4 and IPv6 prefixes and have them announced from Cloudflare’s global anycast network (300+ cities in 100+ countries) while using the full security and performance stack. As of November 2025, Cloudflare offers a self-serve BYOIP API that automates ownership validation via RPKI and IRR/DNS checks, reducing onboarding from weeks to minutes while still supporting traditional account-team workflows. Below you’ll find Cloudflare setup documentation, BYOIP requirements, pricing notes, and integration steps to bring and control your own IP ranges within Cloudflare’s secure network infrastructure.
Provider Details
| Field | Information |
|---|---|
| Provider Name | Cloudflare |
| Website | Cloudflare Website |
| ASN(s) | 13335 |
| Regions Supported | Global anycast (300+ cities, 100+ countries); regional or location-constrained announcements on request |
| Support Contact | Existing customers: Work with your Cloudflare account team to enable BYOIP New prospects: Contact Cloudflare Sales |
| Tech Article & Date | DIY BYOIP: a new way to Bring Your Own IP prefixes to Cloudflare – November 2025 Bringing Your Own IPs to Cloudflare (BYOIP) – July 2020 |
| BYOIP Scope | Enterprise-only BYOIP for IPv4 and IPv6 with full integration into Cloudflare’s connectivity cloud: CDN/WAF, Magic Transit, Spectrum, Cloudflare One / Gateway dedicated egress, DNS via Address Maps, and Aegis |
| Supported Versions | IPv4 and IPv6 |
| Supported Services | CDN & WAF, Spectrum (TCP/UDP apps), Magic Transit (L3), Cloudflare One / Gateway dedicated egress, Aegis, and other L7 security services addressable via BYOIP service bindings |
Technical Requirements
| Requirement | Details |
|---|---|
| Prefix Size | IPv4: /24 minimum (smallest routable prefix Cloudflare will announce) IPv6: /48 minimum |
| ASN Ownership Required | Dedicated ASN not required for standard deployments; Cloudflare originates BYOIP prefixes from AS13335 by default. Custom ASN / special routing designs may require bespoke engagement with Cloudflare. |
| IRR or RADb Object | Required: IRR route/route6 object or reverse DNS TXT record containing Cloudflare’s ownership validation token and authorizing AS13335 as an origin. |
| ROA or LOA | RPKI ROA specifying AS13335 as the origin is required for self-serve BYOIP. Cloudflare automatically generates LOA-style documentation for upstream networks; manual LOA workflows remain available if automation cannot be used. |
| RIR Limitations | Prefixes must be registered with a Regional Internet Registry that supports IRR and RPKI (typically ARIN, RIPE NCC, APNIC, LACNIC, or AFRINIC). |
Step-by-Step BYOIP Process
Cost and Limitations
| Item | Details |
|---|---|
| Fees | A single BYOIP prefix can be shared across multiple Cloudflare services simultaneously (for example, Magic Transit for L3 protection plus CDN/WAF or Aegis on selected IPs) using service bindings. |
| Bundled or Standalone | A single BYOIP prefix can be shared across multiple Cloudflare services simultaneously (for example Magic Transit for L3 protection plus CDN/WAF or Aegis on selected IPs) using service bindings. |
| Traffic/Peering Restrictions | When a prefix is advertised via BYOIP, Cloudflare originates it from AS13335 across its global anycast network. Parallel announcements for the same prefix through other providers are generally discouraged and must be coordinated with Cloudflare to avoid routing conflicts. |
| Other Limitations | Minimum prefix size is /24 (IPv4) or /48 (IPv6). Each onboarded prefix requires its own validation and default service binding, and Cloudflare requires at least one active service binding for the full prefix to prevent inadvertent black-holing of traffic. |
Automation & Developer Access
Abuse & Reputation Management
Related Resources
Cloudflare BYOIP Developer Docs
DIY BYOIP: a new way to Bring Your Own IP prefixes to Cloudflare
Cloudflare BYOIP GA Blog Post (2020)
Bring your own IP space to Cloudflare – Reference Architecture
Cloudflare Aegis & BYOIP Deep Dive
IPXO Cloudflare BYOIP Setup Guide