When using Cloudflare, website visitors visit the Cloudflare CDN server configured as a reverse proxy server. Cloudflare CDN server fetches pages from your web server and caches them for a while, serving them to subsequent visitors. Your web application may report Cloudflare CDN server IP ad visitor IP as all requests to your website are … Read more
Cloudflare provides a way to block bad bots under If you want to block one bots that is allowed, you can block them by User Agent. To see what bots visit your website, see How to get list of User-Agent from access log. This will get list of all bots accessing your website from Apache, … Read more
IP sets are a framework inside the Linux kernel, which can be administered by the ipset utility. Depending on the type, an IP set may store IP addresses, networks, (TCP/UDP) port numbers, MAC addresses, interface names or combinations of them in a way, which ensures lightning speed when matching an entry against a set. To … Read more
When using Apache web server behind cloudflare, apache logs show cloudflare IP address instead of real visitor IP address. To show actual visitor IP address, you can enable remoteip apache module. On Debian/Ubuntu server: On RHEL/CentOS/Fedora, it is Usually enabled by default; check with: Cloudflare publishes its IP ranges here: IPv4: https://www.cloudflare.com/ips-v4IPv6: https://www.cloudflare.com/ips-v6 Create file … Read more
When using Nginx Behind Cloudflare, logs and web applications show Cloudflare sever IP instead of visitor IP. To fix this, edit Inside “http” section, add You can get updated list of CloudFlare IPs from https://www.cloudflare.com/ips Restart Nginx with Example Nginx Config https://gist.github.com/serverok/fef5c76bf96f8e016bf64095da4a64dc Back to Nginx
Show Real IP Whitelist Cloudflare IP in csf firewall
Here are CloudFlare page rules for WordPress web site. yourdomain/wp-admin/* Security Level = High Cache Level = Bypass Disable Apps Disable Performance yourdomain/wp-content/uploads/* Browser Cache TTL = a day Cache Level = Cache Everything Edge Cache TTL = a month Configuration Rules (http.request.uri wildcard “/wp-login.php*”) Security Level = I am Under Attack Security > WAF … Read more