← Smart Shield / smart-shield / configuration / dedicated-egress-ips

Setup

You can use the Edit Zone Settings API endpoint to set up Dedicated CDN Egress IPs (formerly known as Aegis). If you are not familiar with how Cloudflare API works, refer to Fundamentals.

• The Dedicated CDN Egress IPs (DCEI) zone setting is only available within Cloudflare accounts that own leased IPs, or accounts to which a BYOIP prefix has been delegated. If you wish to use Dedicated CDN Egress IPs for zones that do not meet this criteria, contact your account team.

• Each dedicated egress pool can consist of either IPs from a BYOIP prefix or Cloudflare-leased IPs. A single dedicated egress pool cannot contain both BYOIPs and leased IPs. Also, a single BYOIP prefix can be used for either CDN ingress or CDN egress, but not both.

1. Contact your account team to get the ID for your dedicated egress pool.
2. Make a PATCH request to the Edit Zone Setting endpoint:

• Specify aegis as the setting ID in the URL.
• In the request body, set enabled to true and use the ID from the previous step as the pool_id value.

curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/settings/aegis" \
	--request PATCH \
	--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
	--json '{
		"id": "aegis",
		"value": {
				"enabled": true,
				"pool_id": "<EGRESS_POOL_ID>"
		}
	}'

curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/settings/aegis" \
	--request GET \
	--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN"

curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/settings/aegis" \
	--request PATCH \
	--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
	--json '{
		"id": "aegis",
		"value": {
				"enabled": false
		}
	}'

You can find your leased dedicated IPs for CDN egress on the dashboard under Address space > Leased IPs ↗.

If you are using BYOIP, refer to BYOIP prefixes instead.