Wiki is placed behind Cloudflare for Dos protection. I am very sure that I have set varnish/nginx correctly. I can see the x-forwarded-for value in debug log to be:
X-FORWARDED-FOR | my-ip, cloudflare-ip, 127.0.0.1 |
---|
However, checkuser page only show the cloudflare ip, without any xff logged.
I tried to modify the x-forwarded-for log to be my-ip, 127.0.0.1. However, checkuser still show the cloudflare ip.
$wgUsePrivateIPs = true; and $wgSquidServersNoPurge added for sure.
How can I get the real IP? or at least enable the xff logged?