2025.02.06 Cloudflare CF-Connecting-IP

CF-Connecting-IP でリモートIPを取得

remoteip_moduleを利用
※Aache 2.4

module有効化

sudo a2enmod remoteip
sudo systemctl restart apache2

apachectl -M | grep remo
 remoteip_module (shared)

/etc/apache2/conf-available/remoteip.conf

RemoteIPHeader CF-Connecting-IP

sudo a2enconf remoteip
sudo systemctl restart apache2

REMOTE_ADDR が CF-Connecting-IP になっているか確認

tail -f /var/log/apache2/access.log

あとは普通に.htaccessなどで制御

Order Deny,Allow
Deny from all
Allow from xxx.xxx.xxx.xxx
Allow from xxx.xxx.xxx.xxx
Allow from xxx.xxx.xxx.xxx