Skip to content

Commit f6e86ca

Browse files
authored
add geolocation ip info (#27212)
1 parent 988d92f commit f6e86ca

File tree

1 file changed

+19
-9
lines changed

1 file changed

+19
-9
lines changed

src/content/docs/cloudflare-one/traffic-policies/egress-policies/dedicated-egress-ips.mdx

Lines changed: 19 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -123,14 +123,12 @@ To verify that the IP geolocation has updated, check your dedicated egress IP in
123123

124124
Your users' physical egress location will vary depending on whether their connection is over IPv4 or IPv6.
125125

126-
| Destination IP | Destination proxied by Cloudflare | Physical egress location |
127-
| -------------- | --------------------------------- | --------------------------------------------- |
128-
| IPv4 | No | Egresses data center with dedicated egress IP |
129-
| IPv4 | Yes | Egresses locally connected data center |
130-
| IPv6 | No | Egresses locally connected data center |
131-
| IPv6 | Yes | Egresses locally connected data center |
132-
133-
Regardless of egress location, the IP geolocation will match the assigned dedicated egress IP.
126+
| Protocol | Destination proxied by Cloudflare | Physical egress location | IP geolocation |
127+
| -------- | --------------------------------- | ------------------------------------ | ------------------------------------ |
128+
| IPv4 | No | Data center with dedicated egress IP | Matches dedicated egress IP location |
129+
| IPv4 | Yes | Locally connected data center | Matches dedicated egress IP location |
130+
| IPv6 | No | Locally connected data center | Matches dedicated egress IP location |
131+
| IPv6 | Yes | Locally connected data center | Matches dedicated egress IP location |
134132

135133
#### IPv4
136134

@@ -140,9 +138,21 @@ We are able to offer better IPv4 performance when users visit domains proxied by
140138

141139
For example, assume you have a primary dedicated egress IP in Los Angeles and a secondary dedicated egress IP in New York. A user in Las Vegas would see Las Vegas as their connected data center. If they go to a site not proxied by Cloudflare ([gray-clouded](/dns/proxy-status/#dns-only-records)), such as `espn.com`, they will egress from Los Angeles (or whichever city is in the matching egress policy). If they go to an orange-clouded site such as `cloudflare.com`, they will physically egress from Las Vegas but use Los Angeles as their IP geolocation.
142140

141+
:::note[IPv4 and IPv6 behavior]
142+
IPv4 addresses are limited, so Cloudflare must physically route traffic to the data center where your dedicated IPv4 address is provisioned. IPv6 has virtually unlimited address space, so Cloudflare can assign IPv6 ranges from all geolocations to every data center. This means IPv6 traffic can egress locally while still appearing to originate from your configured geolocation.
143+
:::
144+
143145
#### IPv6
144146

145-
Traffic proxied via IPv6, unlike IPv4, will physically egress from the connected data center but logically egress with one of your dedicated IP geolocations. In the example above, the Las Vegas user would egress from Las Vegas but IP geolocate from Los Angeles.
147+
Traffic proxied via IPv6, unlike IPv4, will physically egress from the connected data center but logically egress with one of your dedicated IP geolocations. This is possible because IPv6 has significantly more address space available, allowing Cloudflare to assign IPv6 ranges from all possible geolocations to every data center. Each account receives a /64 IPv6 range, which provides ample space for this approach.
148+
149+
In the example above, the Las Vegas user would physically egress from Las Vegas but their traffic would IP geolocate to Los Angeles. This means:
150+
151+
| Attribute | Value |
152+
| --------------- | ------------------------------------------------------------------------------------------------------------- |
153+
| Physical egress | User's closest Cloudflare data center (Las Vegas) |
154+
| IP geolocation | Dedicated egress IP location configured in your egress policy (Los Angeles) |
155+
| Logs | Correct IP geolocation (Los Angeles) even though the physical egress is from a different location (Las Vegas) |
146156

147157
## Frequently asked questions (FAQ)
148158

0 commit comments

Comments
 (0)