CDN

Fastly IP ranges

Fastly publishes the IP ranges of its CDN edge servers. Origins behind Fastly can restrict access to these addresses.

Fastly's edge addresses, which requests to your origin come from when a site sits behind Fastly. Pin your origin ACL and trusted-proxy settings to this list, then read the visitor IP from the header your Fastly configuration sets (commonly Fastly-Client-IP), not from the socket address.

IPv4 prefixes: 19
IPv6 prefixes: 2
IPv4 addresses: 304,128
Updated: Oct 1, 2026

Is this IP Fastly?

Checks the address against the current list, in your browser.

Download the list

Generated from the current list.

Source: https://api.fastly.com/public-ip-list · official documentation

All prefixes

The list as of Oct 1, 2026; the page loads the latest copy when it opens.

Prefix
23.235.32.0/20
43.249.72.0/22
103.244.50.0/24
103.245.222.0/23
103.245.224.0/24
104.156.80.0/20
140.248.64.0/18
140.248.128.0/17
146.75.0.0/17
151.101.0.0/16
157.52.64.0/18
167.82.0.0/17
167.82.128.0/20
167.82.160.0/20
167.82.224.0/20
172.111.64.0/18
185.31.16.0/22
199.27.72.0/21
199.232.0.0/16
2a04:4e40::/32
2a04:4e42::/32

Frequently asked questions

What are the IP ranges of Fastly?

Fastly publishes 19 IPv4 and 2 IPv6 prefixes (304,128 IPv4 addresses in total) in its official list at https://api.fastly.com/public-ip-list. This page shows the list as of Oct 1, 2026 and loads the latest copy when it opens.

How often do the Fastly IP ranges change?

Providers add and remove ranges regularly, sometimes several times a week. Do not hard-code the list: load it from its source (or this page's JSON) on a schedule, for example daily.

How do I allow only Fastly in nginx?

Download the nginx format on this page and include it in a location block: one 'allow' line per prefix followed by 'deny all;'. Regenerate the file regularly, because the list changes.

IP geolocation API

Know who is behind any IP

Beyond published lists, the ipbase API tells you the owner, ASN and location of every IP address, and on the Medium plan and above its data-center and VPN status, so you can recognise cloud traffic and bots from any provider.

Read the documentation

1,000 free requests every month. No credit card required.

GET https://api.ipbase.com/v2/info?ip=1.1.1.1

{
  "data": {
    "ip": "1.1.1.1",
    "type": "v4",
    "connection": {
      "asn": 13335,
      "organization": "APNIC and Cloudflare DNS Resolver project",
      "isp": "Cloudflare, Inc",
      "range": "1.1.1.0/24"
    },
    "location": {
      "country": { "alpha2": "AU", "name": "Australia" },
      "zip": "4000"
    },
    "security": { "is_vpn": null, "is_tor": null, "threat_score": null }
  }
}