Fail2ban compatibility with other CDNs

mhosseint

Hello,
I am using Arvancloud CDN and I want to enable fail2ban for the site.
But unfortunately there is no other option available other than Cloudflare CDN.
Please release an update so that I can use other CDNs. I don't know but if it is possible based on headers or something else, it is possible.
Thanks.

mhosseint

I enabled CDN Resolution in the Advanced Setup section of the website. And I set the Request header to X-Forwarded-For and specified the IPs. But still fail2ban blocks the user's real IP.
We should use CDN when the CDN Resolution settings are on and it has specific headers and IPs, and if fail2ban was on on the site and the request was specified with that header and was from the allowed IPs, it would no longer block the user's real IP.
But unfortunately now it is interfering and not working properly. Please fix this.

aaPanel_Kern

Hello,

Blocking real IP is correct.
If it is CND’s IP, it is wrong.
Fail2ban reads the logs of the website and processes them based on the IP address of the logs.

mhosseint

So what can we do to make fail2ban not interfere with the user's real IPs that are registered from the CDN?

aaPanel_Kern

Hello,

Check why it was intercepted
By default fail2ban will only block it if it is accessed more than the specified number of times within a period of time.

mhosseint