Add Cloudflare IP Range to the Security Group

Question

Hi AWS family,

I would like my EC2 instance's ports 21, 22, 80, 443, 3306, 8443, 8447 and 8880 to be accessed only from the Cloudflare IP addresses, which can be found at below link. To do this, I need to add the following IP addresses to the security group on separate lines for each port. Due to many ports and IP addresses, I reached the maximum 60 security group rule limit. Is there an easier way I can do this?

https://www.cloudflare.com/ips/

Thanks in advance

Ganesh Kudikala · Answer

Hello

You can create multiple security groups and attach SG to the Ec2 instance, If you would like to increase the quota you request AWS support https://aws.amazon.com/premiumsupport/knowledge-center/increase-security-group-rule-limit/

Info Limits: https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html#vpc-limits-security-groups

Thank You
GK

Add Cloudflare IP Range to the Security Group

Relevant content