pfSense for Cloudflare services on the perimeter
Alias
pfSense allows you to use a alias (as part of the Pf functions)
% pfctl -sr | grep cflare pass in quick on em0 reply-to (em0 144.76.Y.X) inet proto tcp from <cflarev4> to 192.168.1.XXX port = http flags S/SA keep state label "USER_RULE: NAT http"
This alias will pull in a list of IPv4 addresses: