1
General Discussion / Nginx plugin + Cloudflare proxying
« on: October 10, 2019, 03:44:44 am »
Hello,
I currently proxy websites through CloudFlare. While my web applications do not care about incoming IP, I just noticed that nginx is blocking some IPs from CloudFlare.
For example: https://imgur.com/a/2OYnGUp
Two questions here:
1) I didn't (actively) enable anything that should be blocking incoming http requests. I went through as much of the UI as I can but nothing jumped out at me as being active and would ban IPs. Is there some default WAF config somewhere or otherwise what is causing the nginx plugin proxy to block these IPs?
2) These are CloudFlare IPs. Is there a way to configure nginx (via UI) to show these IPs in this case? There is this nginx module: https://support.cloudflare.com/hc/en-us/articles/200170786-Why-do-my-server-logs-show-CloudFlare-s-IPs-using-CloudFlare- and http://nginx.org/en/docs/http/ngx_http_realip_module.html. Is there a recommended way to activate this module and populate the config for nginx?
Thanks!
I currently proxy websites through CloudFlare. While my web applications do not care about incoming IP, I just noticed that nginx is blocking some IPs from CloudFlare.
For example: https://imgur.com/a/2OYnGUp
Two questions here:
1) I didn't (actively) enable anything that should be blocking incoming http requests. I went through as much of the UI as I can but nothing jumped out at me as being active and would ban IPs. Is there some default WAF config somewhere or otherwise what is causing the nginx plugin proxy to block these IPs?
2) These are CloudFlare IPs. Is there a way to configure nginx (via UI) to show these IPs in this case? There is this nginx module: https://support.cloudflare.com/hc/en-us/articles/200170786-Why-do-my-server-logs-show-CloudFlare-s-IPs-using-CloudFlare- and http://nginx.org/en/docs/http/ngx_http_realip_module.html. Is there a recommended way to activate this module and populate the config for nginx?
Thanks!