Reading real IPs

Publisher: Psychz Networks, April 13,2017

Need to see your client's real IPs through our CDN service? NO problem!

NGINX:

Nginx makes this super simple and to the point. Compile your nginx build with "--with-http_realip_module"

./configure --with-http_realip_module

Then in the location{} directive (or server/http) place the following:

set_real_ip_from  23.238.135.0/24;

set_real_ip_from  172.106.13.0/24;

set_real_ip_from  23.228.221.0/24;

set_real_ip_from  45.34.165.0/24;

set_real_ip_from  172.106.111.0/24;

set_real_ip_from  172.107.96.0/24;

set_real_ip_from  172.107.92.0/24;

set_real_ip_from  45.76.114.0/24;

set_real_ip_from  45.76.48.0/24;

set_real_ip_from  45.77.34.0/24;

real_ip_header    X-Forwarded-For;

real_ip_recursive on;

We will update the list as we add more nodes!

Apache

Create a file such as "trusted-proxies.list", to stick to the docs, we'll put ours in the "conf" folder.

Place the following IPs in your trusted-proxies.list file:

       23.238.135.0/24;
       172.106.13.0/24;
       23.228.221.0/24;
       45.34.165.0/24;
       172.106.111.0/24;
       172.107.96.0/24;
       172.107.92.0/24;
       45.76.114.0/24;
       45.76.48.0/24;
       45.77.34.0/24;

this list will be updated as we add more nodes!

then Simply add the following to your apache config:

RemoteIPHeader X-Forwarded-For
RemoteIPInternalProxyList conf/trusted-proxies.lst

and change your log file (typically /etc/apache2/apache2.conf) to:

LogFormat "%a %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined

We'll update this tutorial with more web servers as needed, stay tuned! Contact our support if you use a web server we didn't talk about here!

Views: (5371), Votes:(-1)