Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
litespeed_wiki:config:cloudflare-ips-or-subnets [2016/06/16 20:57]
Jackson Zhang [Anti-DDOS Blocking CloudFlare IP/Subnet Connections]
litespeed_wiki:config:cloudflare-ips-or-subnets [2016/06/29 13:41] (current)
Rob Holda
Line 1: Line 1:
 ====== Anti-DDOS Blocking CloudFlare IP/Subnet Connections ====== ====== Anti-DDOS Blocking CloudFlare IP/Subnet Connections ======
  
-If you have CloudFlare enabled and are receiving 522 connection errors, ​than it is possible that LiteSpeed Web Server'​s (LSWS) anti-ddos settings are causing these connections to be blocked. To get around this you can whitelist these IPs/subnets by adding them to LSWS's "​Allowed List".+If you have CloudFlare enabled and are receiving 522 connection errors, ​then it is possible that LiteSpeed Web Server'​s (LSWS) anti-ddos settings are causing these connections to be blocked. To get around thisyou can whitelist these IPs/subnets by adding them to LSWS's "​Allowed List".
  
-For your reference, CloudFlare IP Ranges ​is listed [[https://​www.cloudflare.com/​ips|here]] ​+For your reference, CloudFlare IP Ranges ​are listed [[https://​www.cloudflare.com/​ips|here]] ​
  
  
Line 13: Line 13:
 Scroll to the bottom of the page. You will see the "​Access Control"​ section which contains the "​Allowed List" and "​Denied list. Click "​Edit"​ at the top right of this section. Scroll to the bottom of the page. You will see the "​Access Control"​ section which contains the "​Allowed List" and "​Denied list. Click "​Edit"​ at the top right of this section.
  
-By default, the "​Allowed List" will contain "​ALL"​. ​This allows all IPs/subnets to connect to the server ​for most cases. Since the CloudFlare enabled IPs/subnets are being blocked by LSWS's anti-ddos settings, adding them to this (comma separated) list as trusted ​IP/subnet ​will bypass this blocking.+By default, the "​Allowed List" will contain "​ALL"​. ​In most cases, this allows all IPs/subnets to connect to the server. Since the CloudFlare enabled IPs/subnets are being blocked by LSWS's anti-ddos settings, adding them to this (comma separated) list as trusted ​IPs/subnets ​will bypass this blocking.
  
 {{ :​litespeed_wiki:​config:​cloudflare-unblock.png?​nolink,​850px |}} {{ :​litespeed_wiki:​config:​cloudflare-unblock.png?​nolink,​850px |}}
Line 22: Line 22:
  
  
-Lastly, you must now perform a graceful restart to update your server. Do this by clicking "​Graceful Restart"​ under the "​Actions"​ menu at the top in LSWS web admin.+Lastly, you must now perform a graceful restart to update your server. Do this by clicking "​Graceful Restart"​ under the "​Actions"​ menu at the top in ​the LSWS Web Admin Console.
  
  • Admin
  • Last modified: 2016/06/16 20:57
  • by Jackson Zhang