Client IPs behind Cloudflare are not recognized

Issue

• Imunify360 version 5.6 or newer is installed.
• Detect IPs behind CDN option is enabled.
• Cloudflare IP addresses still appear in web server logs.

Environment

• Imunify360
• mod_remoteip
• Cloudflare

Solution

Regardless of whether Imunify360 is used or not, when using CloudFlare, it is required to add its' IP addresses as trusted proxies to correctly recognize visitors' IP addresses. mod_remoteip can be configured according to Cloudflare documentation.

Note: mod_cloudflare is not recommended for Apache web server at the moment as per official documentation.

Useful links

• https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs#C5XWe97z77b3XZV 
• https://support.cpanel.net/hc/en-us/articles/360051107513-Restoring-visitors-IP-with-mod-remoteip