How to Allow/List Stripe's webhook IPs in Cloudflare
Stripe publishes the IP ranges they use for webhooks. You should allow/list them in Cloudflare.
In Cloudflare Dashboard:
1. Go to Security → WAF → Custom rules or Firewall → Tools / Rules.
2. Create a rule that allows traffic from Stripe's IPs (https://docs.stripe.com/ips)
3. Action: Allow (or at least skip security checks).
This ensures Stripe's IPs are never rate-limited or blocked by generic WAF/rate-limiting rules.