Apple Private Relay · Nginx

# Apple_private_relay IP Ranges
# Updated: 2026-07-06 03:18:45
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# To restrict access to only these IPs in nginx,
# add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default):
# include /path/to/nginx_apple_private_relay_allow.conf;

allow 104.28.28.0/26;
allow 104.28.28.64/29;
allow 104.28.28.72/30;
allow 104.28.28.76/32;
allow 104.28.28.79/32;
allow 104.28.28.80/32;
allow 104.28.28.83/32;
allow 104.28.28.84/30;
allow 104.28.28.88/32;
allow 104.28.28.91/32;
allow 104.28.28.92/32;
allow 104.28.28.95/32;
allow 104.28.28.96/30;
allow 104.28.28.100/32;
allow 104.28.29.0/27;
… (13571 more lines)

# Apple_private_relay IP Ranges
# Updated: 2026-07-06 03:18:49
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# To deny access from these IPs in nginx,
# add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default):
# include /path/to/nginx_apple_private_relay_deny.conf;

deny 104.28.28.0/26;
deny 104.28.28.64/29;
deny 104.28.28.72/30;
deny 104.28.28.76/32;
deny 104.28.28.79/32;
deny 104.28.28.80/32;
deny 104.28.28.83/32;
deny 104.28.28.84/30;
deny 104.28.28.88/32;
deny 104.28.28.91/32;
deny 104.28.28.92/32;
deny 104.28.28.95/32;
deny 104.28.28.96/30;
deny 104.28.28.100/32;
deny 104.28.29.0/27;
… (13571 more lines)