How to Block or Allow Traffic by Country in Cloudflare?

If you want to restrict access to your job board based on a visitor’s country—either to allow only traffic from specific countries or to block unwanted regions—Cloudflare provides an easy way to do this through its Web Application Firewall.

Step 1: Log in to Your Cloudflare Dashboard

1. Go to https://dash.cloudflare.com
2. Select the domain you want to configure.

Step 2: Navigate to Security Rules

1. In the left-hand sidebar, go to Security > WAF.
2. Click on the Custom Rules tab.
3. Click Create Rule.

Step 3: Create a Country-Based Rule

Before setting up your rule, you’ll need the 2-letter ISO country codes for the countries you want to block or allow.

You can find the full list here: ISO 3166 Country Codes (Wikipedia)

Option A: Block Traffic from Specific Countries

1. Rule Name: Enter a descriptive name like Block Traffic from Canada.
2. Expression Editor: Click Edit expression and paste the following (replacing the country codes as needed):

ip.geoip.country in {"CA"}

3. Actions: From the dropdown, select Block.
4. Click Deploy to activate the rule.

Option B: Allow Only Traffic from Specific Countries

1. Rule Name: Enter a descriptive name like Allow Only US and UK.
2. Expression Editor: Click Edit expression and paste:

not ip.geoip.country in {"US" "GB"}

3. Action: Select Block—this blocks all countries not listed.
4. Click Deploy.

Updated on: 14/05/2025