Hi Discourse community! Am I correct to assume that IP Lookup gets the last IP from the X-Forwarded-For header? Cloudfront seems to be attaching their IP at the end. How would we modify nginx to remove the last IP in the X-Forwarded-For header? We were hoping to get the client IP to prevent spammers. Could anyone please provide help / guidance? Cheers

Just wanted to check if anyone else has a workaround for something like this?

Hi, did you check this? [image] How do you setup Cloudflare? Support Hey, I can’t access that account anymore which is why I am making a fresh topic. I am unaware on how to edit the config to include those lines? All help is appreciated.

Have a look at Run other websites on the same machine as Discourse

I just encounted this problem with Cloudflare when I turned on their proxy. I fixed by changing the Nginx config. You ahve to find all the proxy IP addresses and for each one in the http section: set_real_ip_from 173.245.48.0/20; set_real_ip_from 103.21.244.0/22; set_real_ip_from 103.22.200.0/22; ... Then you can set the real IP from the header passed by Cloudflare: real_ip_header CF-Connecting-IP; Since the proxy IP addresses could change, I’ll need to automate pulling and updating these. Then reload/restart nginx with: sv nginx reload or sv nginx restart Argh. I wish I’d seen this post earlier! I’d just spent an hour today re-creating something that was already there: X-Forwarded-For proxy tag not recognized by Discourse?: [image]X-Forwarded-For proxy tag not recognized by Discourse? Take a look at the templates/cloudflare.template.yml file. Basically, you need to insert set_real_ip_from directives

It is probably better to set a cron job to check regularly than rely on rebuilds.

It doesn’t sound like it changes very often: https://community.cloudflare.com/t/how-often-do-cloudflare-ips-change/9802/7

2 years is actually more frequently than I assumed. However, the check is so simple that doing it once per day is no problem. Hopefully, they update the list a few days before new IP ranges go active.

IP Lookup is Pulling CDN's X-Forwarded-For

Product Support Self-hosting

riking (Kane York) July 23, 2024, 3:18pm 6

I’d recommend you switch to the built in solution, because it will automatically update the IP list from Cloudflare when you rebuild the site!

Topic		Replies	Views
Commit b4a3389 更新后如何获取用户ip Self-hosting nginx , cloudflare	3	545	June 29, 2026
Cloudflare Real-IP via Apache Self-hosting	3	1468	April 5, 2019
Suggestion for Cloudflare template to get real IP from users Self-hosting	3	984	November 28, 2022
Last IP shows Reverse Proxy IP address Product Support	5	2688	May 22, 2019
How to set set_real_ip_from for discourse Product Support	9	4008	November 22, 2017

IP Lookup is Pulling CDN's X-Forwarded-For

Related topics