在 Cloudflare 自带 IP(BYOIP)
2020-07-30
今天,我们很高兴宣布,我们的所有第 7 层产品以及 Spectrum 和 Magic Transit 服务中将全面可用自带IP(BYOIP)。配置 BYOIP 后,Cloudflare 边缘将公告客户自己的 IP 前缀,并且这些前缀可用于我们的第 7 层服务、Spectrum 或 Magic Transit。...
\n \n
您只需点击一个按钮,即可开启从 Cloudflare 边缘公告您的 IP,并在几分钟之内发布到全世界。
所有 BYOIP 客户会收到关于其前缀的网络分析。BYOIP 前缀中的所有 IP 也可被视为静态 IP。另外,将您的 IP 前缀用于 Cloudflare 提供的服务有着特定的优势。
\nCloudflare 具有功能强大的第 7 层产品组合,例如 Bot Management、Rate Limiting、Web Application Firewall 和 Content Delivery 等产品。您可以选择将 BYOIP 与我们的第 7 层产品搭配,获得使用自己 IP 地址的所有好处。
对于第 7 层服务,我们可以支持各种 IP 到域的映射请求,包括在域之间共享 IP 或将域置于专门的 IP 上,这可以帮助满足诸如非 SNI 支持之类的要求。
如果您也是 SSL for SaaS 客户,那么使用 BYOIP 后,您可以在 IP 因为某种原因而不可用时,灵活地更改 custom_hostnames
的 IP 地址响应。
Spectrum 是 Cloudflare 推出的一款解决方案,用于保护和加速运行任何 UDP 或 TCP 协议的应用程序。Spectrum API 现已支持 BYOIP。使用 BYOIP 的 Spectrum 客户可以通过 Spectrum 的 API 指定他们希望与 Spectrum 应用程序关联的 IP。
\nMagic Transit 是第 3 层安全服务,它通过公告您的 IP 地址并将该流量吸引到 Cloudflare 边缘进行处理来处理所有网络流量。Magic Transit 支持复杂的数据包过滤和防火墙配置。BYOIP 是使用 Magic Transit 服务的一项要求。由于 Magic Transit 是 IP 级别的服务,因此 Cloudflare 必须能够公告您的 IP 才能提供此服务。
\n在 Cloudflare 可以公告您的前缀之前,我们需要一些文件来着手。首先是称为“授权书”(LOA)的文件,它要详细说明您的前缀的相关信息,以及您希望 Cloudflare 如何公告这个前缀。在置备您的前缀前,我们会将这一文件与我们的 1 级转接服务提供商共享。这个步骤是为了确保 1 级转接服务提供商知道我们有权公告您的前缀。
其次,我们需要您的互联网路由注册(IRR)记录是最新的,并在 LOA 中体现该数据。这通常意味着,确保您在地区注册表中的条目已得到更新(即 ARIN、RIPE、APNIC)。
文书发出之后,请与您的客户团队联络,了解您的前缀何时能做好公告准备。
我们还鼓励客户使用 RPKI ,也可针对客户前缀提供相应支持。我们已经发表了相关博客文章,也构建了广泛的工具,以方便客户采用这一协议。如果您对 BYOIP 加 RPKI 支持感兴趣,请告诉您的客户团队!
\n每个客户前缀都可通过 UI 或 API 的“动态广告”切换开关来公告,这将导致 Cloudflare 边缘代表您公告或撤消前缀。只要客户团队告知您前缀已准备就绪,您就可以完成此项操作。
在 IP 做好公告准备后,您可能要为您的前缀设置“委派”。委派管理的是如何在多个 Cloudflare 帐户中使用这个前缀,根据前缀绑定到的具体服务,其影响略有不同。一个前缀只能归一个帐户所有,但委派可以将一部分前缀功能扩展到其他帐户。我们的开发者文档中也有相关陈述。如今,委派可以会影响到第 7 层和 Spectrum BYOIP 前缀。
\n第 7 层:如果您使用 BYOIP + 第 7 层产品,同时也使用 SSL for SaaS 服务,则委派至另一帐户将允许该帐户也可使用这个前缀来验证自定义主机名(即,不仅是拥有该前缀的原始帐户可以使用)。这意味着,多个帐户可以使用相同的 IP 前缀来提供自定义主机名流量。此外,您所有的 IP 都可以为自定义主机名提供流量;也就是说,如果某个 IP 由于任何原因被阻止,您都可以轻松地更改这些主机名的 IP 地址。
Spectrum:如果您通过 Spectrum API 使用 BYOIP + Spectrum,则可以在前缀中指定要用来创建 Spectrum 应用程序的 IP。如果您将前缀委派至另一个帐户,那么这个第二帐户也能够指定该前缀中的 IP 来创建应用。
如果您有兴趣了解在 Magic Transit、CDN 或 Spectrum 等服务中使用 BYOIP 的更多信息,您可以联系客户团队(现有客户)或 sales@cloudflare.com (新的潜在客户)。
"],"published_at":[0,"2020-07-30T16:00:00.000+01:00"],"updated_at":[0,"2024-10-10T00:30:48.125Z"],"feature_image":[0,"https://cf-assets.www.cloudflare.com/zkvhlag99gkb/16Sk1pDb3eXLvrx5kZsbvy/fe54fa4309c5daaa01b17afaa0d8c3c6/bringing-your-own-ips-to-cloudflare-byoip.png"],"tags":[1,[[0,{"id":[0,"6QktrXeEFcl4e2dZUTZVGl"],"name":[0,"产品新闻"],"slug":[0,"product-news"]}],[0,{"id":[0,"5fZHv2k9HnJ7phOPmYexHw"],"name":[0,"DNS"],"slug":[0,"dns"]}],[0,{"id":[0,"7qTIAO0WLKVKPVrj8q1vpD"],"name":[0,"Magic Transit"],"slug":[0,"magic-transit"]}],[0,{"id":[0,"7GsUXAEWttzfewhzSJXA6W"],"name":[0,"Spectrum"],"slug":[0,"spectrum"]}]]],"relatedTags":[0],"authors":[1,[[0,{"name":[0,"Tom Brightbill"],"slug":[0,"tom-brightbill"],"bio":[0,null],"profile_image":[0,"https://cf-assets.www.cloudflare.com/zkvhlag99gkb/F3B1bXIjKGQPd9IwQWtDg/521f75593c1f2ff6c2da3b0d8fb5a7c8/tom-brightbill.jpg"],"location":[0,null],"website":[0,null],"twitter":[0,null],"facebook":[0,null]}]]],"meta_description":[0,null],"primary_author":[0,{}],"localeList":[0,{"name":[0,"Bringing Your Own IPs to Cloudflare (BYOIP) Config"],"enUS":[0,"English for Locale"],"zhCN":[0,"Translated for Locale"],"zhHansCN":[0,"No Page for Locale"],"zhTW":[0,"No Page for Locale"],"frFR":[0,"No Page for Locale"],"deDE":[0,"No Page for Locale"],"itIT":[0,"No Page for Locale"],"jaJP":[0,"Translated for Locale"],"koKR":[0,"No Page for Locale"],"ptBR":[0,"No Page for Locale"],"esLA":[0,"No Page for Locale"],"esES":[0,"No Page for Locale"],"enAU":[0,"No Page for Locale"],"enCA":[0,"No Page for Locale"],"enIN":[0,"No Page for Locale"],"enGB":[0,"No Page for Locale"],"idID":[0,"No Page for Locale"],"ruRU":[0,"No Page for Locale"],"svSE":[0,"No Page for Locale"],"viVN":[0,"No Page for Locale"],"plPL":[0,"No Page for Locale"],"arAR":[0,"No Page for Locale"],"nlNL":[0,"No Page for Locale"],"thTH":[0,"No Page for Locale"],"trTR":[0,"No Page for Locale"],"heIL":[0,"No Page for Locale"],"lvLV":[0,"No Page for Locale"],"etEE":[0,"No Page for Locale"],"ltLT":[0,"No Page for Locale"]}],"url":[0,"https://blog.cloudflare.com/bringing-your-own-ips-to-cloudflare-byoip"],"metadata":[0,{"title":[0],"description":[0],"imgPreview":[0,""]}]}],"locale":[0,"zh-cn"],"translations":[0,{"posts.by":[0,"作者"],"footer.gdpr":[0,"GDPR"],"lang_blurb1":[0,"这篇博文也有 {lang1} 版本。"],"lang_blurb2":[0,"这篇博文也有 {lang1} 和{lang2}版本。"],"lang_blurb3":[0,"这篇博文也有 {lang1}、{lang2} 和{lang3}版本。"],"footer.press":[0,"新闻"],"header.title":[0,"Cloudflare 博客"],"search.clear":[0,"清除"],"search.filter":[0,"过滤"],"search.source":[0,"来源"],"footer.careers":[0,"招聘"],"footer.company":[0,"公司"],"footer.support":[0,"支持"],"footer.the_net":[0,"theNet"],"search.filters":[0,"过滤器"],"footer.our_team":[0,"我们的团队"],"footer.webinars":[0,"网络研讨会"],"page.more_posts":[0,"更多帖子"],"posts.time_read":[0,"{time} 分钟阅读时间"],"search.language":[0,"语言"],"footer.community":[0,"社区"],"footer.resources":[0,"资源"],"footer.solutions":[0,"解决方案"],"footer.trademark":[0,"商标"],"header.subscribe":[0,"订阅"],"footer.compliance":[0,"合规性"],"footer.free_plans":[0,"Free 计划"],"footer.impact_ESG":[0,"影响/ESG"],"posts.follow_on_X":[0,"在 X 上关注"],"footer.help_center":[0,"帮助中心"],"footer.network_map":[0,"网络地图"],"header.please_wait":[0,"请稍候"],"page.related_posts":[0,"相关帖子"],"search.result_stat":[0,"针对 {search_keyword} 的第 {search_range} 个搜索结果(共 {search_total} 个结果)"],"footer.case_studies":[0,"案例研究"],"footer.connect_2024":[0,"Connect 2024"],"footer.terms_of_use":[0,"服务条款"],"footer.white_papers":[0,"白皮书"],"footer.cloudflare_tv":[0,"Cloudflare TV"],"footer.community_hub":[0,"社区中心"],"footer.compare_plans":[0,"比较各项计划"],"footer.contact_sales":[0,"联系销售"],"header.contact_sales":[0,"联系销售团队"],"header.email_address":[0,"电子邮件地址"],"page.error.not_found":[0,"未找到页面"],"footer.developer_docs":[0,"开发人员文档"],"footer.privacy_policy":[0,"隐私政策"],"footer.request_a_demo":[0,"请求演示"],"page.continue_reading":[0,"继续阅读"],"footer.analysts_report":[0,"分析报告"],"footer.for_enterprises":[0,"企业级服务"],"footer.getting_started":[0,"开始使用"],"footer.learning_center":[0,"学习中心"],"footer.project_galileo":[0,"Project Galileo"],"pagination.newer_posts":[0,"较新的帖子"],"pagination.older_posts":[0,"较旧的帖子"],"posts.social_buttons.x":[0,"在 X 上讨论"],"search.icon_aria_label":[0,"搜索"],"search.source_location":[0,"来源/位置"],"footer.about_cloudflare":[0,"关于 Cloudflare"],"footer.athenian_project":[0,"Athenian Project"],"footer.become_a_partner":[0,"成为合作伙伴"],"footer.cloudflare_radar":[0,"Cloudflare Radar"],"footer.network_services":[0,"网络服务"],"footer.trust_and_safety":[0,"信任与安全"],"header.get_started_free":[0,"免费开始使用"],"page.search.placeholder":[0,"搜索 Cloudflare"],"footer.cloudflare_status":[0,"Cloudflare 状态"],"footer.cookie_preference":[0,"Cookie 首选项"],"header.valid_email_error":[0,"必须是有效的电子邮件地址。"],"search.result_stat_empty":[0,"显示第 {search_range} 个结果(共 {search_total} 个结果)"],"footer.connectivity_cloud":[0,"全球连通云"],"footer.developer_services":[0,"开发人员服务"],"footer.investor_relations":[0,"投资者关系"],"page.not_found.error_code":[0,"错误代码:404"],"search.autocomplete_title":[0,"请输入查询内容。按回车键发送"],"footer.logos_and_press_kit":[0,"标识与媒体资料包"],"footer.application_services":[0,"应用程序服务"],"footer.get_a_recommendation":[0,"获得推荐"],"posts.social_buttons.reddit":[0,"在 Reddit 上讨论"],"footer.sse_and_sase_services":[0,"SSE 和 SASE 服务"],"page.not_found.outdated_link":[0,"您可能使用了过期的链接,或者输入了错误的地址。"],"footer.report_security_issues":[0,"报告安全问题"],"page.error.error_message_page":[0,"抱歉,我们找不到您要打开的页面。"],"header.subscribe_notifications":[0,"订阅以接收新文章的通知:"],"footer.cloudflare_for_campaigns":[0,"Cloudflare for Campaigns"],"header.subscription_confimation":[0,"订阅已确认。感谢订阅!"],"posts.social_buttons.hackernews":[0,"在 Hacker News 上讨论"],"footer.diversity_equity_inclusion":[0,"多元、公平与包容"],"footer.critical_infrastructure_defense_project":[0,"关键基础设施防护项目"]}]}" ssr="" client="load" opts="{"name":"PostCard","value":true}" await-children="">2020-07-30
今天,我们很高兴宣布,我们的所有第 7 层产品以及 Spectrum 和 Magic Transit 服务中将全面可用自带IP(BYOIP)。配置 BYOIP 后,Cloudflare 边缘将公告客户自己的 IP 前缀,并且这些前缀可用于我们的第 7 层服务、Spectrum 或 Magic Transit。...