transparent nginx integration for CloudFlare

Author: serghey-rodin

install/debian/nginx.conf

@@ -68,6 +68,28 @@ http {
     proxy_buffers       32 4k;
 
 
+    # Cloudflare
+    set_real_ip_from   199.27.128.0/21;
+    set_real_ip_from   173.245.48.0/20;
+    set_real_ip_from   103.21.244.0/22;
+    set_real_ip_from   103.22.200.0/22;
+    set_real_ip_from   103.31.4.0/22;
+    set_real_ip_from   141.101.64.0/18;
+    set_real_ip_from   108.162.192.0/18;
+    set_real_ip_from   190.93.240.0/20;
+    set_real_ip_from   188.114.96.0/20;  
+    set_real_ip_from   197.234.240.0/22;
+    set_real_ip_from   198.41.128.0/17;
+    set_real_ip_from   162.158.0.0/15;
+    set_real_ip_from   104.16.0.0/12;
+    set_real_ip_from   2400:cb00::/32;
+    set_real_ip_from   2606:4700::/32;
+    set_real_ip_from   2803:f800::/32;
+    set_real_ip_from   2405:b500::/32;
+    set_real_ip_from   2405:8100::/32;
+    real_ip_header     CF-Connecting-IP;
+
+
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
     ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;

install/rhel/nginx.conf

@@ -68,6 +68,28 @@ http {
     proxy_buffers       32 4k;
 
 
+    # Cloudflare
+    set_real_ip_from   199.27.128.0/21;
+    set_real_ip_from   173.245.48.0/20;
+    set_real_ip_from   103.21.244.0/22;
+    set_real_ip_from   103.22.200.0/22;
+    set_real_ip_from   103.31.4.0/22;
+    set_real_ip_from   141.101.64.0/18;
+    set_real_ip_from   108.162.192.0/18;
+    set_real_ip_from   190.93.240.0/20;
+    set_real_ip_from   188.114.96.0/20;  
+    set_real_ip_from   197.234.240.0/22;
+    set_real_ip_from   198.41.128.0/17;
+    set_real_ip_from   162.158.0.0/15;
+    set_real_ip_from   104.16.0.0/12;
+    set_real_ip_from   2400:cb00::/32;
+    set_real_ip_from   2606:4700::/32;
+    set_real_ip_from   2803:f800::/32;
+    set_real_ip_from   2405:b500::/32;
+    set_real_ip_from   2405:8100::/32;
+    real_ip_header     CF-Connecting-IP;
+
+
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
     ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;

install/ubuntu/nginx.conf

@@ -68,6 +68,28 @@ http {
     proxy_buffers       32 4k;
 
 
+    # Cloudflare
+    set_real_ip_from   199.27.128.0/21;
+    set_real_ip_from   173.245.48.0/20;
+    set_real_ip_from   103.21.244.0/22;
+    set_real_ip_from   103.22.200.0/22;
+    set_real_ip_from   103.31.4.0/22;
+    set_real_ip_from   141.101.64.0/18;
+    set_real_ip_from   108.162.192.0/18;
+    set_real_ip_from   190.93.240.0/20;
+    set_real_ip_from   188.114.96.0/20;  
+    set_real_ip_from   197.234.240.0/22;
+    set_real_ip_from   198.41.128.0/17;
+    set_real_ip_from   162.158.0.0/15;
+    set_real_ip_from   104.16.0.0/12;
+    set_real_ip_from   2400:cb00::/32;
+    set_real_ip_from   2606:4700::/32;
+    set_real_ip_from   2803:f800::/32;
+    set_real_ip_from   2405:b500::/32;
+    set_real_ip_from   2405:8100::/32;
+    real_ip_header     CF-Connecting-IP;
+
+
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
     ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;