To bring your own IPs, you must work with your account team to understand everything you need to ensure a smooth transition during the onboarding process.

Cloudflare requires a service-specific configuration for your prefixes, as well as some requirements common to all BYOIP customers regardless of service type. These requirements are common to all products compatible with BYOIP, such as [Magic Transit](https://developers.cloudflare.com/magic-transit/), [Spectrum](https://developers.cloudflare.com/spectrum/), and [CDN services](https://developers.cloudflare.com/cache/).

## Prerequisites

There are two major prerequisites before Cloudflare can begin onboarding your IP space.

1. Cloudflare must receive a [Letter of Agency (LOA)](https://developers.cloudflare.com/byoip/concepts/loa/) to announce your prefixes, which we will share with our transit partners as evidence that we are allowed to announce the route.

2. You must verify that your [Internet Routing Registry (IRR)](https://developers.cloudflare.com/byoip/concepts/irr-entries/) records are up to date and contain:

   * `route` or `route6` objects matching the exact prefixes you want to onboard
   * `origin` matching the correct ASN you want to onboard

RPKI validation

You are not required to use Resource Public Key Infrastructure (RPKI). However, if you do, make sure your ROAs are accurate. You can use [Cloudflare's RPKI Portal](https://rpki.cloudflare.com/?view=validator) and a second source such as [Routinator](https://rpki-validator.ripe.net/ui/) to double check your prefixes.

After onboarding, [Border Gateway Protocol (BGP)](https://www.cloudflare.com/learning/security/glossary/what-is-bgp/) announcements for customer prefixes can be controlled with the [Dynamic Advertisement](https://developers.cloudflare.com/byoip/concepts/dynamic-advertisement/) API or via the Cloudflare dashboard.

## Cloudflare IPs

If you are unable to bring your own IP to Cloudflare, you can use an IP address issued by Cloudflare.

Using a Cloudflare IP may be a good option if you:

* Have one or a few IPs allocated from home or business class ISPs.
* Are an online streamer who could be the target of a DoS attack if your IP is leaked.
* Are a business owner with a small number of locations with broadband Internet connections.
* Do not own an IP space with a /24 prefix length.
* Maintain a large number of locations with a combination of connectivity methods.
* Own an IP space with a /24 prefix length but do not advertise prefixes from every location.

To protect your network using a Cloudflare IP address, contact your account manager.

Note

When you use a Cloudflare-managed IP space, you do not need to provide a Letter of Agency (LOA) and advertise your prefixes that are associated with bringing your own IP.
