Simplify allowlist management and lock down origin access with Cloudflare Aegis

What this post added

This post introduces Bring Your Own IPs (BYOIP) for Cloudflare Aegis, a customer-accessible Aegis API, and observability for Aegis IP utilization. It details how Aegis provides dedicated egress IP addresses to lock down origin access, contrasting it with traditional IP allowlisting and other origin protection methods like mTLS and Cloudflare Tunnels. The post explains the routing of requests with Aegis, including the use of soft-unicasting and Unimog for load balancing, and discusses capacity considerations for both IPv4 and IPv6, highlighting the benefits of IPv6 for scale and resiliency. The introduction of BYOIP for Aegis allows customers to onboard entire IPv4 /24 prefixes or IPv6 /64 prefixes for cost-effective configurations with higher capacity.