How can I prevent Google Compute Engine external ip for public and cloudflare whitelist for GCE?

Question

I need to prevent Google Cloud Engine external ip for public access, I mean users can access site only via domain over cloudflare, not GCE vm instance external ip. Maybe I must make Cloudflare IP ranges(https://www.cloudflare.com/ips-v4) whitelist from VPC Network/Firewall rules, but I don't know how?

Answer 1

Thanks, I've only added https://www.cloudflare.com/ips-v4 ip ranges to default-allow-http and default-allow-https, then solved