<div dir="ltr">On Wed, Sep 14, 2016 at 2:23 PM, c0nw0nk <span dir="ltr"><<a href="mailto:nginx-forum@forum.nginx.org" target="_blank">nginx-forum@forum.nginx.org</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote"><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">Yeah the reason it does not work behind CloudFlare is because the limit_conn<br>
and limit_req is blocking the CloudFlare server IP for making to many<br>
requests. So that is why i am reciving the DOS output "503 service<br>
unavailable"<br></blockquote><div><br><div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">Misconfiguration.<br></div> <br></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
And I don't fancy building a whitelist of IP's since it would require<br>
manually updating allot. The cloudflare server IP's would need excluding<br>
from the $binary_remote_addr output.<br></blockquote><div><br><div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">Void argument.<br></div><div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">If you did your howework, you would have realized the list provided in the example is taken from CloudFlare's published IP address, which are also conveniently delivered as text format to ease the job of automatic grabbing. You'll have to choose if you want to fully automate the verification/update of those IP addresses</div> <div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">or if you want to introduce manual check/action in the process.<br><br></div></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
Currently i am using my first method and it works great.<br></blockquote><div><br><div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">It has been several times you have been stating that already. There is no point in asking for help if you won't listen to the answers.<br></div><div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">Glad with your resource-greedy unoptimized way?</div> <div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">Fine. End of transmission.<br></div><div style="font-size:small;color:rgb(51,51,153);display:inline" class="gmail_default">Others who are seeking for the best practices regarding combining limit_req, limit_rate dans the realip module will find all the information already available.<br><br><div style="font-size:small;color:rgb(51,51,153)" class="gmail_default">Best of luck in your proceedings,<br></div><div><div><font size="1"><span style="color:rgb(102,102,102)">---<br></span><b><span style="color:rgb(102,102,102)">B. R.</span></b></font><br></div></div></div></div></div></div></div>