This is a sub-article. To go back to the main article, click here.

Via Web Interface:

  1. Go to GCP -> VPC network -> firewall rules -> create (or click this link)
  2. Fill in the relevant fields. make sure "direction" is "Ingress" and "Action on match" is "Allow"
  3. For "protocols and ports", check TCP and only allow 443 (or other ports)
  4. for "Source IP ranges", enter every IP from the list manually.

Via command line:

gcloud compute --project=YOUR-PROJECT firewall-rules create NAME --direction=INGRESS --priority=1000 --network=default --action=ALLOW --rules=tcp:443 --source-ranges=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/12,172.64.0.0/13,131.0.72.0/22,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32