Real IP in |Warning: The system load average is xxx".

[shanky]

Hi

When using Cloudflare, all logs files are using Real IP correctly but the ips in "Warning: The system load average is" are cludflare's IPs.

Please show Real IP in the Warning System.

Thanks

 

[LawsHosting]

Have you got the mod_cloudflare module installed?

(not sure about the Nginx equivalent)

 

[shanky]

Yes. I have install mod_cloudflare. In httpd logs files have real ip but only in Warning message of DA is still showing CL IP, for example
This server I'm using 'apache & php-fpm56/53'.

grep cloudflare /etc/httpd/conf/httpd.conf
LoadModule cloudflare_module /usr/lib/apache/mod_cloudflare.so

58 172.68.106.49
64 172.68.106.97
66 172.68.106.43
66 172.68.106.91

tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.91:58454
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.91:58352
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.91:57918
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.91:57958
tcp ESTAB 0 0 ::ffff:208.110.80.226:443 ::ffff:172.68.242.61:21090
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.97:15524
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.43:20284
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.49:29326
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.43:20546
tcp ESTAB 0 0 ::ffff:208.110.80.226:80 ::ffff:172.68.106.49:29680

Thanks

 

[Arieh]

That's because the DA warning is simply displaying the actual connections, probably the output of netstat.

To get the IP-address responsible for initiating the CF request, you would need something like this: https://cetre.co.uk/blog/get-a-cont...resses-on-a-web-server-using-x-forwarded-for/