Cloudflare Docs

Cloudflare Docs

Overview
Concepts
Zone setups
Full setup
Setup
Partial (CNAME) setup
Setup
Convert to full setup
DNS resolution
DNS Zone transfers
Cloudflare as Primary
Setup
Cloudflare as Secondary
Setup
Proxy traffic
Access Control Lists (ACLs)
Cloudflare IP addresses
Create ACL
Troubleshooting
Subdomain setup
Setup
Migrate to new account
Enable DNSSEC
Reference
Domain statuses
Nameserver assignment
Troubleshooting
Nameservers
DNS_PROBE_FINISHED_NXDOMAIN
Cannot add domain
Domain deleted from Cloudflare
DNS records
How to
Manage DNS records
Import and export records
Create root domain
Create subdomain
Set up email records
Use dynamic IP addresses
Round-robin DNS
Delegating Subdomains
Reference
Proxy status
DNS record types
Time to Live (TTL)
Record attributes
Wildcard DNS records
Vendor-specific DNS records
Troubleshooting
Add records
Exposed IP addresses
CNAME flattening
Setup
Example diagram
Additional options
Custom nameservers
DNSSEC
Troubleshooting
Analytics and logs
Reverse zones and PTR records
DNS Firewall
Setup
Analytics
FAQ
Random prefix attack mitigation
About
Setup
Reference
Analytics API properties
Recommended third-party tools
Troubleshooting
FAQ
DNS issues
Email issues

Access Control Lists (ACLs)

Access Control Lists (ACLs) define allowed source IP addresses from where servers accept incoming data or control messages.

When setting up new DNS zone transfers (incoming or outgoing), you will need to update the ACL at your other DNS provider(s) to allow Cloudflare to communicate with their server(s). You can find the Cloudflare IP addresses you need to allow at your other DNS provider(s) at Cloudflare IP addresses.

You need to create a new ACL in your Cloudflare account in the following situations if you want to specify additional NOTIFY IPs that Cloudflare should listen to (Cloudflare as secondary) or additional IPs Cloudflare should accept zone transfer requests from (Cloudflare as primary).