Failed to load trust proxies from Cloudflare server.

[lucianocn]

Today Cloudflare IP list became unstable and the library started throwing:
Failed to load trust proxies from Cloudflare server.

curl https://www.cloudflare.com/ips-v4 => Internal Server Error

The library should retry loading later, but continue serving requests without crashing the application.

Suggested behavior:

• use fallback IPs
• log instead of throwing fatal exception

[jasonvarga]

@lucianocn Do you have a workaround?

[lucianocn]

@jasonvarga
As it is unstable, I recommend temporarily disabling this library.
Set LARAVEL_CLOUDFLARE_ENABLED=false in your .env file

[JakubSvestka]

Our implementation:

In AppServiceProvider:

LaravelCloudflare::getProxiesUsing(fn() => $this->app->make(CloudflareProxies::class)->load());

Service for loading IPs by API endpoint with a fallback:

readonly class CloudflareProxies
{
    private const string URL = 'https://api.cloudflare.com/client/v4/ips';

    /**
     * Snapshot of https://api.cloudflare.com/client/v4/ips taken on 2026-05-12,
     * used as a fallback when the live API call fails.
     *
     * @var array<int, string>
     */
    private const array FALLBACK_IPV4_CIDRS = [
        '173.245.48.0/20',
        '103.21.244.0/22',
        '103.22.200.0/22',
        '103.31.4.0/22',
        '141.101.64.0/18',
        '108.162.192.0/18',
        '190.93.240.0/20',
        '188.114.96.0/20',
        '197.234.240.0/22',
        '198.41.128.0/17',
        '162.158.0.0/15',
        '104.16.0.0/13',
        '104.24.0.0/14',
        '172.64.0.0/13',
        '131.0.72.0/22',
    ];

    /**
     * @var array<int, string>
     */
    private const array FALLBACK_IPV6_CIDRS = [
        '2400:cb00::/32',
        '2606:4700::/32',
        '2803:f800::/32',
        '2405:b500::/32',
        '2405:8100::/32',
        '2a06:98c0::/29',
        '2c0f:f248::/32',
    ];

    public function __construct(private Client $client)
    {
    }

    /**
     * @return array<int, string>
     */
    public function load(): array
    {
        try {
            $response = $this->client->get(self::URL, [
                RequestOptions::TIMEOUT => 5,
                RequestOptions::CONNECT_TIMEOUT => 5,
                RequestOptions::VERIFY => true,
            ]);
            $data = json_decode((string) $response->getBody(), true, flags: JSON_THROW_ON_ERROR);

            $result = $data['result'] ?? [];

            if (($result['ipv4_cidrs'] ?? []) === []) {
                $result['ipv4_cidrs'] = self::FALLBACK_IPV4_CIDRS;
            }

            if (($result['ipv6_cidrs'] ?? []) === []) {
                $result['ipv6_cidrs'] = self::FALLBACK_IPV4_CIDRS;
            }

            return array_merge(
                $result['ipv4_cidrs'],
                $result['ipv6_cidrs'],
            );
        } catch (Throwable $e) {
            Log::error('Failed to load trust proxies from Cloudflare server.', ['error' => $e->getMessage()]);

            return array_merge(self::FALLBACK_IPV4_CIDRS, self::FALLBACK_IPV6_CIDRS);
        }
    }
}

[lucianocn]

@JakubSvestka great! I vote for this as the default implementation 🥇

[kohenkatz]

I don't have much experience with GitHub Actions (more familiar with Gitlab CI), but if this implementation is done, I think it would be important to have some kind of scheduled job on the repository that raises an issue or opens a pull request if the cloudflare response changes, so that the fallback IPs don't get outdated.

[marcel-felt]

We also had downtime due to the Cloudflare IP list problems. Here's an alternative solution if anyone else wants it. This version keeps an updated IP list on disk as a backup in case the cache and CF are both not available.

Features

• Uses your laravelcloudflare.php config file and original code to get the IP list.
• Stores / updates on the IP list on disk even time the IPs are fetched (even if run from command).
• Falls back to the on disk IP list if there is an error retrieving a new list.
• Throws an exception only if the servers are down, the cache is empty and the on disk list has not yet been generated.

Use by adding to AppServiceProvider:

use Exception;
use Illuminate\Support\Facades\Log;
use Illuminate\Support\Facades\Storage;
use Monicahq\Cloudflare\CloudflareProxies;
use Monicahq\Cloudflare\LaravelCloudflare;
use UnexpectedValueException;

in the boot() method add the following:

LaravelCloudflare::getProxiesUsing(function ()
{
    $filename = 'cloudflare-ips.txt';
    try
    {
        $proxies = app(CloudflareProxies::class)->load();
        Storage::put($filename, implode("\n", $proxies));

        return $proxies;
    }
    catch (UnexpectedValueException $e)
    {
        Log::error($e);

        if (!Storage::exists($filename))
        {
            throw new Exception("LaravelCloudflare: No backup $filename file found.");
        }

        return array_filter(explode("\n", Storage::get($filename)));
    }
});

If you want to ensure you have the back IP list on disk run php artisan cloudflare:reload to force a cache (and ip file) refresh.

[ctf0]

@asbiin can u plz check

[asbiin]

Please feel free to open a Pull Request.