Add Cloudflare IP Range to the Security Group

Question

Hi AWS family,

I would like my EC2 instance's ports 21, 22, 80, 443, 3306, 8443, 8447 and 8880 to be accessed only from the Cloudflare IP addresses, which can be found at below link. To do this, I need to add the following IP addresses to the security group on separate lines for each port. Due to many ports and IP addresses, I reached the maximum 60 security group rule limit. Is there an easier way I can do this?

https://www.cloudflare.com/ips/

Thanks in advance

Answer

Hello

You can create multiple security groups and attach SG to the Ec2 instance, If you would like to increase the quota you request AWS support https://aws.amazon.com/premiumsupport/knowledge-center/increase-security-group-rule-limit/

Info Limits: https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html#vpc-limits-security-groups

Thank You
GK

Add Cloudflare IP Range to the Security Group

Relevant questions

A Record (Cloudflare) pointing to EC2 instance not reachable

504 error when Cloudfront send https-only request to ALB with specific security group

VMware Cloud on AWS and AWS External IP range for firewall access

Add Cloudflare IP Range to the Security Group

My ip address for ec2 instance and vmware esxi cannot be reached?

My Network Load Balancer is not enforcing the target Security group

Outbound Ports 80 and 443 being blocked from instance

it cannot be accessed through port 80 or 443 of the public IP, but it can be accessed normally through the private IP.

Server ports 80 and/or 443 are not publicly accessible

Unable to connect on port 443