To protect our websites from attacks and improve performance, we often use Cloudflare, a Content Delivery Network (CDN) and security service.
However, since Cloudflare routes traffic through proxy servers, visitors’ real IP addresses do not reach your web server directly.
This can cause:
If Cloudflare is enabled in "Proxy" mode (orange cloud active), your logs will only show Cloudflare IP ranges instead of real visitor IPs.
This leads to serious issues in attack analysis, IP-based filtering, and user tracking.
In this guide, we’ll show you how to correctly restore and display real visitor IPs on your server through Cloudflare. 👇
However, if you manage your own VPS/VDS server, you can easily set it up yourself.
Here’s how to do it on Plesk Panel:
However, since Cloudflare routes traffic through proxy servers, visitors’ real IP addresses do not reach your web server directly.
This can cause:
- 📉 Incorrect data in real-time traffic analytics
- 🚫 Misconfigured firewall (security rule) behavior
- 🕵️♂️ Difficulty in identifying malicious users
- 🧾 Inaccurate log records
If Cloudflare is enabled in "Proxy" mode (orange cloud active), your logs will only show Cloudflare IP ranges instead of real visitor IPs.
This leads to serious issues in attack analysis, IP-based filtering, and user tracking.
In this guide, we’ll show you how to correctly restore and display real visitor IPs on your server through Cloudflare. 👇
🧩 How to Display Real IPs
If you are using a shared hosting provider, you may need your host to apply this configuration.However, if you manage your own VPS/VDS server, you can easily set it up yourself.
Here’s how to do it on Plesk Panel:
- 🔧 Log in to your Plesk Panel.
- 🌍 From Subscriptions, select your domain.
- 🧰 Click on Apache & nginx Settings.
- 📜 In the Additional nginx directives field, paste the following code.
🧾 Nginx Configuration Code to Add
Bash:
set_real_ip_from 173.245.48.0/20;
set_real_ip_from 103.21.244.0/22;
set_real_ip_from 103.22.200.0/22;
set_real_ip_from 103.31.4.0/22;
set_real_ip_from 141.101.64.0/18;
set_real_ip_from 108.162.192.0/18;
set_real_ip_from 190.93.240.0/20;
set_real_ip_from 188.114.96.0/20;
set_real_ip_from 197.234.240.0/22;
set_real_ip_from 198.41.128.0/17;
set_real_ip_from 162.158.0.0/15;
set_real_ip_from 104.16.0.0/13;
set_real_ip_from 104.24.0.0/14;
set_real_ip_from 172.64.0.0/13;
set_real_ip_from 131.0.72.0/22;
set_real_ip_from 2400:cb00::/32;
set_real_ip_from 2606:4700::/32;
set_real_ip_from 2803:f800::/32;
set_real_ip_from 2405:b500::/32;
set_real_ip_from 2405:8100::/32;
set_real_ip_from 2a06:98c0::/29;
set_real_ip_from 2c0f:f248::/32;
real_ip_header X-Forwarded-For;