Cloudflare Edge Errors
Cloudflare 1002 Restricted
Restricted — Cloudflare blocked the request because the URL resolves to a disallowed IP address
What 1002 Means
The 1002 error on the Cloudflare Edge Errors indicates restricted — cloudflare blocked the request because the url resolves to a disallowed ip address. This typically occurs due to the hostname in the request resolves to a cloudflare ip address, creating a loop.
Cloudflare returns 1002 to prevent routing loops and unauthorized direct-IP access. The most common cause is a DNS record that points back to Cloudflare's own proxy network.
Technical Background
Cloudflare actively detects when a proxied request would loop back to its own edge network and blocks it with 1002. This protects against infinite proxy loops that would consume resources.
Cloudflare detects DNS records pointing back to its own IP range and blocks the request to prevent an infinite proxy loop. A or CNAME records pointing to Cloudflare anycast addresses are the most common source of this error.
Common Causes
- The hostname in the request resolves to a Cloudflare IP address, creating a loop
- Direct IP access is disabled in the Cloudflare zone settings
- The origin IP is on Cloudflare's restricted IP list
Typical Scenarios
- CNAME pointing to a Cloudflare-proxied domain creating a DNS loop
- A record manually set to a Cloudflare anycast IP by mistake
- Visitor attempting to access a site by its raw IP address when the zone blocks direct access
What to Know
A 1002 is a deliberate block by Cloudflare to prevent routing loops. It surfaces when a DNS record resolves to a Cloudflare-owned IP, which would cause the request to loop back through the proxy network.
Frequently Asked Questions
Common questions about Cloudflare 1002 error
Cloudflare zones can be configured to block direct IP access to enforce that all traffic routes through the CDN. Visitors must use the domain name, not the origin IP.