Cloudflare original IP

Community Support
1

Just an idea:
You should integrate this into panel https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs-Logging-visitor-IP-addresses-with-mod-cloudflare-

2

It should be already to intregraded

See https://github.com/hestiacp/hestiacp/blob/0727ef9d5c6a7ff61caab8f38b2d86e62c50a631/install/deb/nginx/nginx.conf#L84-L105

The list could be outdated maybe we need to check it sometime…

2 Likes
3

I think the list is good, so this is activated per default when adding a new domain name?

RemoteIPHeader CF-Connecting-IP
RemoteIPTrustedProxy 173.245.48.0/20
RemoteIPTrustedProxy 103.21.244.0/22
RemoteIPTrustedProxy 103.22.200.0/22
RemoteIPTrustedProxy 103.31.4.0/22
RemoteIPTrustedProxy 141.101.64.0/18
RemoteIPTrustedProxy 108.162.192.0/18
RemoteIPTrustedProxy 190.93.240.0/20
RemoteIPTrustedProxy 188.114.96.0/20
RemoteIPTrustedProxy 197.234.240.0/22
RemoteIPTrustedProxy 198.41.128.0/17
RemoteIPTrustedProxy 162.158.0.0/15
RemoteIPTrustedProxy 104.16.0.0/12
RemoteIPTrustedProxy 172.64.0.0/13
RemoteIPTrustedProxy 131.0.72.0/22
RemoteIPTrustedProxy 2400:cb00::/32
RemoteIPTrustedProxy 2606:4700::/32
RemoteIPTrustedProxy 2803:f800::/32
RemoteIPTrustedProxy 2405:b500::/32
RemoteIPTrustedProxy 2405:8100::/32
RemoteIPTrustedProxy 2a06:98c0::/29
RemoteIPTrustedProxy 2c0f:f248::/32

Source of IP’s: https://support.cloudflare.com/hc/en-us/articles/360029696071

4

No, it is part of the nginx.conf

5

If you’re using apache in your setup, then the rpaf and remoteip modules will also fix the IP addresses.

6

I’m using Apache+NGNIX+PHP FPM

7

Then Nginx should pass trough the correct address to Apache / log files