Overview
You may face an issue where your networking/security team blocked all non-US traffic which resulted in your School Loop sites being blocked. When investigating the issue, it appears that the sites are hosted outside the US so you want the support team to change the Cloudflare hosting to appear in the US.
Information
Please note that School Loop hosts all content and data from within the United States.
The Cloudflare IP addresses used could initially be registered outside the US but this does not necessarily mean the content is being served from there. Cloudflare has data centres across the world and will serve content through the one closest to you to give the best performance. In your case, the content should be served from one of the US datacenters as this would be the fastest. The routing from the ISP to Cloudflare should always be to the closest datacenter regardless of which IP is used.
If you are looking at the registered location, there isn't much we can do as that isn't a true reflection of where the content is served from.
If you are genuinely getting content served from outside the US then the problem lies in the routing from the Internet Service Provider to Cloudflare, which the Internet Service Provided has to deal with.
You can check by opening the following URL in the browser
https://your-school.schoolloop.com/cdn-cgi/trace
which shows the hosting location (not just the registration). The output will look like this
fl=202f131 h=your-school.schoolloop.com ip=123.231.123.231 ts=1646742859.377 visit_scheme=https uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) colo=BOM http=http/2 loc=IN tls=TLSv1.3 sni=plaintext warp=off gateway=off
Kindly refer to the Cloudfare article for more information.
If you are unable to work it out with your ISP, as a workaround, you can reach out to your security team and can create exclusions in the firewall's Geolocation Block for the two IP addresses that are used currently:
- 190.93.246.210
- 190.93.247.210
There is also a full list of Cloudflare IP addresses on their website which is also available as a text file. This is kept up to date and can be used to ensure that you aren't blocking any Cloudflare IP addresses.
Apart from this, please make sure to exclude your SchoolLoop domain (eg: your-school.schoolloop.com) as well since its DNS records will always point to the correct IP addresses that need to be allowed or whitelisted.