// CONSUME / OUTPUT FORMATS

11 output formats

Every provider is published in all 11 formats. Pick the one closest to your stack, drop it in, and forget about it. URLs are stable; daily updates land at the same path.

// ALL FORMATS

click a card for a Cloudflare example

Plain text.txt

CIDR per line. The lowest-friction format — pipe into anything.

cloudflare_ips.txt
cloudflare_ips_v4.txt
cloudflare_ips_v6.txt
cloudflare_ips_merged*.txt

See example →

CSV.csv

Two columns: ip_address, ip_type. Open in Excel or grep --csv.

cloudflare_ips.csv

See example →

JSON.json

Array of objects with ip_address + ip_type. Ideal for fetch().

cloudflare_ips.json

See example →

SQL.sql

INSERT statements to load a table named cloud_provider_ips.

cloudflare_ips.sql

See example →

Nginx.nginx

Drop-in include for an http or server block.

nginx_cloudflare_allow.conf
nginx_cloudflare_deny.conf

See example →

Apache.apache

Require ip directives, wrapped in <RequireAny>.

apache_cloudflare_allow.conf
apache_cloudflare_deny.conf

See example →

iptables.iptables

Shell script of iptables commands. Run directly or wrap in a service.

iptables_cloudflare_allow.sh
iptables_cloudflare_deny.sh

See example →

nftables.nftables

nftables ruleset fragment.

nftables_cloudflare_allow.conf
nftables_cloudflare_deny.conf

See example →

UFW.ufw

Shell script using ufw allow/deny. Ubuntu and Debian-friendly.

ufw_cloudflare_allow.sh
ufw_cloudflare_deny.sh

See example →

HAProxy.haproxy

ACL source list. Reference in your frontend.

haproxy_cloudflare_allow.conf

See example →

Caddy.caddy

remote_ip matcher block for Caddy v2.

caddy_cloudflare_allow.conf

See example →

// CURL ONE-LINERS

stable URLs

# All Cloudflare CIDRs as plain text

$ curl -s https://raw.githubusercontent.com/rezmoss/cloud-provider-ip-addresses/main/cloudflare/cloudflare_ips.txt

# GPTBot CIDRs as JSON

$ curl -s https://raw.githubusercontent.com/rezmoss/cloud-provider-ip-addresses/main/gptbot/gptbot_ips.json

# Ready-to-include nginx allow file for AWS

$ curl -s https://raw.githubusercontent.com/rezmoss/cloud-provider-ip-addresses/main/aws/nginx_aws_allow.conf -o /etc/nginx/aws-allow.conf