{"id":1588,"date":"2026-05-19T14:01:59","date_gmt":"2026-05-19T19:01:59","guid":{"rendered":"https:\/\/it.thelibrarie.com\/weblog\/?p=1588"},"modified":"2026-05-19T14:01:59","modified_gmt":"2026-05-19T19:01:59","slug":"cloudflare-apache-access_log-127-0-0-1","status":"publish","type":"post","link":"https:\/\/it.thelibrarie.com\/weblog\/2026\/05\/cloudflare-apache-access_log-127-0-0-1\/","title":{"rendered":"Cloudflare Apache access_log 127.0.0.1"},"content":{"rendered":"\n

Running a standard Apache2 website behind a Cloudflare tunnel and I see that any access attempts are logged with:<\/p>\n\n\n\n

127.0.0.1 - - [19\/May\/2026:18:40:18 +0000] \"GET \/ HTTP\/1.1\" 304 248 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/148.0.0.0 Safari\/537.36\"<\/code><\/p>\n\n\n\n

We’ll need to enable apache’s remoteip module, configure our apache site’s conf to include the required cloudflare header, change our apache logformat syntax, and then define the trusted cloudflare proxy IP’s. Sounds harder than it really is, so here are the commands.<\/p>\n\n\n\n

Enable the Apache remoteip Module
<\/strong>sudo a2enmod remoteip<\/code><\/p>\n\n\n\n

Update your apache site conf file
<\/strong>nano \/etc\/apache2\/sites-available\/000-default.conf<\/code><\/p>\n\n\n\n

\n

ServerAdmin webmaster@localhost
DocumentRoot \/var\/www\/html
ServerName my.awesome.server
RemoteIPHeader CF-Connecting-IP
ErrorLog ${APACHE_LOG_DIR}\/error.log
CustomLog ${APACHE_LOG_DIR}\/access.log combined<\/p>\n<\/blockquote>\n\n\n\n

Update the Apache LogFormat Syntax
<\/strong>nano \/etc\/apache2\/apache2.conf
<\/code>Search for<\/strong> LogFormat “%h %l %u %t “%r” %>s %O “%{Referer}i” “%{User-Agent}i”” combined
Replace with<\/strong> LogFormat “%a %l %u %t “%r” %>s %O “%{Referer}i” “%{User-Agent}i”” combined<\/p>\n\n\n\n

Create Remote IP Trusted Proxy File
<\/strong>nano \/etc\/apache2\/conf-available\/remoteip.conf<\/code><\/p>\n\n\n\n

\n

RemoteIPHeader CF-Connecting-IP
RemoteIPTrustedProxy 173.245.48.0\/20
RemoteIPTrustedProxy 103.21.244.0\/22
RemoteIPTrustedProxy 103.22.200.0\/22
RemoteIPTrustedProxy 103.31.4.0\/22
RemoteIPTrustedProxy 141.101.64.0\/18
RemoteIPTrustedProxy 108.162.192.0\/18
RemoteIPTrustedProxy 190.93.240.0\/20
RemoteIPTrustedProxy 188.114.96.0\/20
RemoteIPTrustedProxy 197.234.240.0\/22
RemoteIPTrustedProxy 198.41.128.0\/17
RemoteIPTrustedProxy 162.158.0.0\/15
RemoteIPTrustedProxy 104.16.0.0\/13
RemoteIPTrustedProxy 104.24.0.0\/14
RemoteIPTrustedProxy 172.64.0.0\/13
RemoteIPTrustedProxy 131.0.72.0\/22<\/p>\n<\/blockquote>\n\n\n\n

You can grab the updated list from https:\/\/www.cloudflare.com\/ips-v4\/# or https:\/\/cloudflare.com\/ips\/<\/em><\/p>\n\n\n\n

Test Apache Configuration
<\/strong>sudo apache2ctl configtest<\/code><\/p>\n\n\n\n

Restart Apache Services
<\/strong>sudo apache2ctl restart<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Running a standard Apache2 website behind a Cloudflare tunnel and I see that any access attempts are logged with: 127.0.0.1 – – [19\/May\/2026:18:40:18 +0000] “GET \/ HTTP\/1.1” 304 248 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/148.0.0.0 Safari\/537.36” We’ll need to enable apache’s remoteip module, configure our apache site’s conf to … Continue reading Cloudflare Apache access_log 127.0.0.1<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-1588","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/1588","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/comments?post=1588"}],"version-history":[{"count":1,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/1588\/revisions"}],"predecessor-version":[{"id":1589,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/1588\/revisions\/1589"}],"wp:attachment":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/media?parent=1588"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/categories?post=1588"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/tags?post=1588"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}