A little correction to my earlier message: IPv6 addresses also seem to work. In my test, I was checking for a dot in the key, and that excluded IPv6 addresses. However, CIDR ranges still fail. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285542,285543#msg-285543