#How to get a static public IP from CF when connected to CF VPN

6 messages · Page 1 of 1 (latest)

velvet grotto
#

Hi, I have zero trust setup working. My tunnel shows connected. When I am connected to the VPN, I get a public IP from 104.28.220.x range. My colleagues get VPN public IP from 104.16.0.0./12 range. I need to allow this CIDR in security group otherwise we cannot access certain public facing apps that we have hosted.

How do I configure a static public IP so that anyone connecting to VPN through that tunnel will get the static public IP.

errant mist
# velvet grotto Hi, I have zero trust setup working. My tunnel shows connected. When I am connec...

It's something Cloudflare offers but only as an add-on to Enterprise plans: https://developers.cloudflare.com/cloudflare-one/policies/gateway/egress-policies/dedicated-egress-ips/

Cloudflare Docs
Dedicated egress IPs | Cloudflare Zero Trust docs

Dedicated egress IPs are static IP addresses that can be used to allowlist traffic from your organization. These IPs are unique to your account and are not used by any other customers routing traffic through Cloudflare’s network. Each dedicated egress IP consists of an IPv4 address and an IPv6 range that are assigned to a specific Cloudflare dat...

velvet grotto
#

Thanks @errant mist

velvet grotto
#

@errant mist but this is for egress, what I am asking about is the ingress IP that we get

#

When client connects to cloudflare network. Those are the IPs I am talking about.

image.png
bold cape
#

but you are talking about public ips? those arent ingress IPs