I'm a little bit confused. All our Cloud Run instances are located in EU regions. But if I block US traffic on CloudFlare, they loose access too. Or in other words, their requests come from US addresses even if they should be located in EU regions.
Did I do some misconfiguration? Can I do anything to fix this issue? Our whole infrastructure is on GCP and we set EU regions on all resources. I expected everything to be located in the EU, but it seems like I was wrong.
Everything is fine! No worries! The only issue is that Google is a US corporate!
Indeed, when Google bought the IP blocks, it referenced its headquarter address as the IP origin.
Therefore, when you use a Google Cloud IP, the IP is listed as coming from the US.
Traffic origin is not really reliable and trustable, prefer authenticated traffic.