Today CloudFlare surprised me. Following their recommendations, on many projects I block incoming connections to the web-server port, allowing requests only from CloudFlare IP ranges. They have an article about this and they provide lists of IPv4 and IPv6 addresses.
But today two terrible things happened.
First of all, the URL without the slash at the end now returns Moved Permanently to address with a slash:
1$ curl -v "https://www.cloudflare.com/ips-v4"
2< HTTP/1.1 301 Moved Permanently
3< Location: https://www.cloudflare.com/ips-v4/
In addition, this “plain-text” file became “not-just-a-text”:
1$ curl "https://www.cloudflare.com/ips-v4/"
2<pre style="word-wrap: break-word; white-space: pre-wrap;">103.21.244.0/22
3103.22.200.0/22
4103.31.4.0/22
5104.16.0.0/12
6108.162.192.0/18
7131.0.72.0/22
8141.101.64.0/18
9162.158.0.0/15
10172.64.0.0/13
11173.245.48.0/20
12188.114.96.0/20
13190.93.240.0/20
14197.234.240.0/22
15198.41.128.0/17
16199.27.128.0/21
17</pre>
The first change I can explain with unification of the URL-addresses. But why in the plain-text file suddenly appears an HTML-tag - I absolutely don’t understand.
PS: And still CloudFlare is one of the best companies in the Internet. They provide one of the best high-quality free services, that I use for many years. Thank you!
