Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
|
litespeed_wiki:config:cloudflare-ips-or-subnets [2016/06/16 20:57] Jackson Zhang [Anti-DDOS Blocking CloudFlare IP/Subnet Connections] |
litespeed_wiki:config:cloudflare-ips-or-subnets [2016/06/29 13:31] Rob Holda [Adding IPs/Subnets To LSWS's Allowed List] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Anti-DDOS Blocking CloudFlare IP/Subnet Connections ====== | ====== Anti-DDOS Blocking CloudFlare IP/Subnet Connections ====== | ||
| - | If you have CloudFlare enabled and are receiving 522 connection errors, than it is possible that LiteSpeed Web Server's (LSWS) anti-ddos settings are causing these connections to be blocked. To get around this you can whitelist these IPs/subnets by adding them to LSWS's "Allowed List". | + | If you have CloudFlare enabled and are receiving 522 connection errors, then it is possible that LiteSpeed Web Server's (LSWS) anti-ddos settings are causing these connections to be blocked. To get around this, you can whitelist these IPs/subnets by adding them to LSWS's "Allowed List". |
| - | For your reference, CloudFlare IP Ranges is listed [[https://www.cloudflare.com/ips|here]] | + | For your reference, CloudFlare IP Ranges are listed [[https://www.cloudflare.com/ips|here]] |
| Line 13: | Line 13: | ||
| Scroll to the bottom of the page. You will see the "Access Control" section which contains the "Allowed List" and "Denied list. Click "Edit" at the top right of this section. | Scroll to the bottom of the page. You will see the "Access Control" section which contains the "Allowed List" and "Denied list. Click "Edit" at the top right of this section. | ||
| - | By default, the "Allowed List" will contain "ALL". This allows all IPs/subnets to connect to the server for most cases. Since the CloudFlare enabled IPs/subnets are being blocked by LSWS's anti-ddos settings, adding them to this (comma separated) list as a trusted IP/subnet will bypass this blocking. | + | By default, the "Allowed List" will contain "ALL". In most cases, this allows all IPs/subnets to connect to the server. Since the CloudFlare enabled IPs/subnets are being blocked by LSWS's anti-ddos settings, adding them to this (comma separated) list as trusted IPs/subnets will bypass this blocking. |
| {{ :litespeed_wiki:config:cloudflare-unblock.png?nolink,850px |}} | {{ :litespeed_wiki:config:cloudflare-unblock.png?nolink,850px |}} | ||
| Line 22: | Line 22: | ||
| - | Lastly, you must now perform a graceful restart to update your server. Do this by clicking "Graceful Restart" under the "Actions" menu at the top in LSWS web admin. | + | Lastly, you must now perform a graceful restart to update your server. Do this by clicking "Graceful Restart" under the "Actions" menu at the top in the LSWS web admin. |