---
title: Add an IP address/prefix to the Advanced DDoS Protection allowlist · Cloudflare DDoS Protection docs
description: To add an IP address or prefix to the Advanced DDoS Protection allowlist:
lastUpdated: 2024-11-04T15:20:19.000Z
source_url:
  html: https://a74404c8.preview.developers.cloudflare.com/ddos-protection/advanced-ddos-systems/how-to/add-prefix-allowlist/index.md
  md: https://a74404c8.preview.developers.cloudflare.com/ddos-protection/advanced-ddos-systems/how-to/add-prefix-allowlist/
---

To add an IP address or prefix to the Advanced DDoS Protection [allowlist](https://developers.cloudflare.com/ddos-protection/advanced-ddos-systems/concepts/#allowlist):

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account.
2. Go to **L3/4 DDoS** > **Advanced Protection**.
3. Under **General settings** > **Allowlist**, select **Edit**.
4. Enter a prefix and (optionally) a description in **Prefix** and **Description**, respectively.
5. To exclude the current prefix from the allowlist instead of including it, uncheck the **Enabled** checkbox.
6. Select **Add**.

Important

Prefixes in the allowlist will be vulnerable to IP spoofing attacks. If an attacker can guess the source IP addresses you have allowlisted, their packets will be allowlisted.
