// APPLE PRIVATE RELAY / NGINX
Apple Private Relay · Nginx
Nginx allow/deny config for Apple Private Relay. Drop into your server block or http context. 286,912 CIDRs, refreshed daily.
// nginx_apple_private_relay_allow.conf
# Apple_private_relay IP Ranges # Updated: 2026-05-25 03:22:10 # Source: https://github.com/rezmoss/cloud-provider-ip-addresses # License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE # This file is generated automatically. Do not edit it directly. # Updates daily at 00:00 UTC # To restrict access to only these IPs in nginx, # add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default): # include /path/to/nginx_apple_private_relay_allow.conf; allow 172.224.226.0/27; allow 172.224.226.32/31; allow 172.224.226.34/31; allow 172.224.226.36/31; allow 172.224.226.38/31; allow 172.224.226.40/31; allow 172.224.226.42/31; allow 172.224.226.44/31; allow 172.224.226.46/31; allow 172.224.226.48/31; allow 172.224.226.50/31; allow 172.224.226.52/31; allow 172.224.226.54/31; allow 172.224.226.56/31; allow 172.224.226.58/31; … (286898 more lines)
// nginx_apple_private_relay_deny.conf
# Apple_private_relay IP Ranges # Updated: 2026-05-25 03:22:11 # Source: https://github.com/rezmoss/cloud-provider-ip-addresses # License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE # This file is generated automatically. Do not edit it directly. # Updates daily at 00:00 UTC # To deny access from these IPs in nginx, # add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default): # include /path/to/nginx_apple_private_relay_deny.conf; deny 172.224.226.0/27; deny 172.224.226.32/31; deny 172.224.226.34/31; deny 172.224.226.36/31; deny 172.224.226.38/31; deny 172.224.226.40/31; deny 172.224.226.42/31; deny 172.224.226.44/31; deny 172.224.226.46/31; deny 172.224.226.48/31; deny 172.224.226.50/31; deny 172.224.226.52/31; deny 172.224.226.54/31; deny 172.224.226.56/31; deny 172.224.226.58/31; … (286898 more lines)