How to Whitelist Spark Shipping IPs & Disable Rate Limiting in Cloudflare
If your website uses Cloudflare, security or rate limiting settings may block or throttle legitimate Spark Shipping traffic. Follow the steps below to ensure uninterrupted communication.
Cloudflare Configuration Guide for Spark Shipping
This guide explains how to configure Cloudflare to allow Spark Shipping traffic. Complete the steps in order. If you are unsure which step applies, start with Step 1 (Verified Bot), as it may resolve the issue on its own.
Step 1: Enable Allow Verified Bots (Recommended First Step)
Spark Shipping is a registered Cloudflare Verified Bot (user-agent: SparkShipping). Enabling this setting may resolve blocking without requiring manual IP whitelisting.
- Log in to Cloudflare.
- Select your domain (Zone).
- Navigate to: Security → Bots
- Ensure Bot Fight Mode or Super Bot Fight Mode is enabled.
- Toggle on Allow Verified Bots.
- Click Save.
ℹ️ Note: This single setting may be sufficient to allow Spark Shipping traffic. Test after saving before proceeding to Step 1.
Step 2: Whitelist (Allowlist) Spark Shipping IP Addresses
This ensures Cloudflare does not block, challenge, or filter requests from Spark Shipping.
Recommended Method: Create a WAF Custom Rule
- Log in to Cloudflare.
- Select your domain (Zone).
- Navigate to: Security → WAF → Custom Rules
- Click Create Rule.
- Name the rule: Allow Spark Shipping IPs
- Under When incoming requests match:
- Field: IP Source Address
- Operator: is in
- Enter the Spark Shipping IP addresses provided to you. Enter each IP on a separate line. CIDR notation (e.g., 0.113.0/24) is supported for IP ranges.
- Under Then: Select Skip and choose to skip:
- WAF Managed Rules
- Security Level
- Browser Integrity Check
- Bot protections (if enabled)
- Click Deploy / Save.
⚠️ Important — Rule Order: WAF Custom Rules are evaluated top to bottom. Ensure the “Allow Spark Shipping IPs” rule is positioned above any rate limiting or blocking rules in your list. Drag it to the top of the rule list if necessary.
This ensures Spark Shipping traffic bypasses Cloudflare security filtering.
Step 3: Disable or Exclude Spark Shipping from Rate Limiting
If Spark Shipping is receiving HTTP 429 Too Many Requests errors, a Cloudflare Rate Limiting rule is throttling the connection. Follow these steps to resolve it.
- Go to: Security → WAF → Rate Limiting
- Review existing rate limiting rules.
- Either:
- Edit the rule and add a condition excluding Spark Shipping IPs (Example: IP Source Address is not in [Spark IP List]), OR
- Increase request thresholds to prevent legitimate automation from being limited.
- Click Save.
Step 4: Verify the Configuration
After saving your changes, confirm the rules are working correctly:
- Navigate to: Security → Events (Firewall Events)
- Filter by the Spark Shipping IP address.
- Confirm no Block or Challenge actions appear against Spark Shipping IPs after saving your rules.
- Contact Spark Shipping support to request a test connection if issues persist.
ℹ️ Note: Changes take effect immediately after saving — no cache purge or DNS propagation is required.
Cloudflare Workers (Advanced)
If you use Cloudflare Workers, WAF allowlist rules do not automatically apply to Worker scripts. Ensure your Worker does not independently block or rate-limit requests from Spark Shipping IPs.
If you are unsure whether Workers are active on your domain, check:
- Workers & Pages → Overview in your Cloudflare dashboard.
Additional Notes
- Changes take effect immediately after saving.
- Always use the exact IP list provided by Spark Shipping.
- If you are unsure which settings are blocking traffic, review Security → Events to identify the source.
- If you need assistance identifying the correct configuration, contact your web administrator or Cloudflare support.