title: How can I prevent Google Compute Engine external ip for public and cloudflare whitelist for GCE?
body: <p>I need to prevent Google Cloud Engine external ip for public access, I mean users can access site only via domain over cloudflare, not GCE vm instance external ip. Maybe I must make Cloudflare IP ranges(<a href="https://www.cloudflare.com/ips-v4" rel="noreferrer">https://www.cloudflare.com/ips-v4</a>) whitelist from VPC Network/Firewall rules, but I don't know how?</p>
  
  <p><a href="https://i.stack.imgur.com/gtZEs.png" rel="noreferrer"><img src="https://i.stack.imgur.com/gtZEs.png" alt="enter image description here"></a></p>