Best practices for dynamic advertisement
Verify user roles & obtain prefix IDs
To prevent issues and simplify the advertisement process during an attack scenario, complete the following tasks.
Assign appropriate user roles. Ensure that users assigned to manage the status of IP prefix advertisement have the Administrator or Super Administrator role in your Cloudflare account. For more information, refer to Setting up Multi-user accounts on Cloudflare.
Get a list of the Prefix IDs you want to manage. Maintain a list of Cloudflare prefix IDs to simplify dynamic advertisement management and operations. To obtain Prefix IDs, review obtain prefix IDs from the dashboard or use the list prefixes operation in the Cloudflare API. Refer to these Prefix IDs when managing prefix advertisement.
Enable prefix advertisement
To avoid latency and the possibility of dropped routes, enable prefix advertisement from Cloudflare before you withdraw the advertisement from your data center.
To enable prefix advertisement, refer to configure dynamic advertisement. This operation requires your Account ID, Prefix IDs, and API key. Enablement takes 2–7 minutes.
Verify the advertisement using looking glass of your choice— Hurricane Electric Internet Services, for example. Use the Cloudflare ASN (13335) to track the advertisement route.
Remove the prefix advertisement that originates from your data center.
Disable prefix advertisement
To disable (withdraw) prefix advertisement, reverse the steps you used to enable it:
Add the prefix advertisement to your data center.
Optional. Verify the advertisement using a looking glass of your choice, such as Hurricane Electric Internet Services.
To disable prefix advertisement at Cloudflare’s edge, refer to configure dynamic advertisement. This operation requires your Account ID, Prefix IDs, and API key.
Disablement takes approximately 15 minutes.