Easy Tech TutsHow to Whitelist Cloudflare IP Addresses Easily 2026
By Impran M N
If a trusted service, API partner, or your own office IP keeps getting caught by Cloudflare's security rules, whitelisting it prevents unnecessary blocks. This guide shows how to build a custom WAF rule that lets specific IP addresses skip your firewall checks entirely.
01Open the Security WAF section
In your domain's dashboard, navigate to the Security directory and open the WAF panel.
02Create a custom rule
Select the Custom Rules tab and click 'Create rule' to start a new exception condition.
03Filter by IP Source Address
Name your rule, set the field parameter to 'IP Source Address', choose the Equals operator, and enter the trusted IP or CIDR range.
04Set the action to Skip
In the action section, choose 'Skip' and check the remaining security filters you want this IP to bypass.
05Deploy and verify
Click Deploy to activate the rule, then test the whitelisted IP to confirm it no longer triggers security challenges.
Frequently asked questions
What's the difference between the WAF Custom Rules and IP Access Rules for whitelisting?
Custom Rules let you build a targeted skip condition for specific firewall filters, while IP Access Rules offer a simpler, account-wide allow option.
Can I whitelist a whole IP range instead of a single address?
Yes, you can enter a CIDR notation range in the IP Source Address field to whitelist a block of addresses at once.
Will whitelisting an IP disable all security checks for it?
It depends on which filters you check in the Skip action; you can choose to bypass all remaining rules or only specific ones.
How quickly does a new whitelist rule take effect?
Deployed WAF rules generally apply within moments across Cloudflare's edge network.
Watch the full walkthrough
The same steps, demonstrated on screen from start to finish.
