As mentioned in the documentation:
To ensure WebShield and Graylist are working correctly (e.g. a correct IP is passed to ModSecurity), the server must recognize WebShield as an internal proxy. For example, for Apache,
mod_remoteipmust be installed.
The command for enabling mod_remoteip is not available for OpenLitespeed:
# a2enmod remoteip
a2enmod: command not found
Switch to Litespeed enterprise or another supported web server.
Note: Litespeed defines real IPs behind CDNs or proxy without mod_remoteip. The Litespeed Web Server assumes Cloudflare IPs to be automatically treated as trusted IPs and uses the first most valid IP address listed in the "X-Forwarded-For" HTTP request header sent by Cloudflare.
More on that can be found in the article:
At the moment, OpenLiteSpeed is not supported. Here on the prerequisites for the Imunify360 product is the list of currently supported Web-servers:
- Nginx (only in Standalone mode)
OpenLitespeed, due to its' specifics in comparison with Litespeed enterprise, will not work without additional development.
There are plans to implement support for it, but there is no ETA at the moment. Subscribe to the blog for further updates.