Skip to content

Commit 0d4f611

Browse files
borsbors
committed
Auto merge of #2499 - jtgeibel:update-cloudfront-ips, r=jtgeibel
Sort and update the list of CloudFront IP addresses After sorting the existing list, the 2nd commit shows the changes to the list of CloudFront IP addresses. This list is used when determining a client's real IP address for logging and rate limiting purposes.
2 parents c3aae75 + 420f4ea commit 0d4f611

File tree

1 file changed

+88
-57
lines changed

1 file changed

+88
-57
lines changed

‎config/nginx.conf.erb‎

Lines changed: 88 additions & 57 deletions
Original file line numberDiff line numberDiff line change
@@ -33,74 +33,105 @@ http {
3333
real_ip_recursive on;
3434

3535
# CloudFront IP addresses from http://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips
36-
# Last updated: 2019-11-18
37-
set_real_ip_from 144.220.0.0/16;
38-
set_real_ip_from 52.124.128.0/17;
39-
set_real_ip_from 54.230.0.0/16;
40-
set_real_ip_from 54.239.128.0/18;
41-
set_real_ip_from 52.82.128.0/19;
42-
set_real_ip_from 99.84.0.0/16;
43-
set_real_ip_from 204.246.172.0/24;
44-
set_real_ip_from 205.251.192.0/19;
45-
set_real_ip_from 54.239.192.0/19;
46-
set_real_ip_from 70.132.0.0/18;
36+
# Last updated: 2020-05-22
37+
set_real_ip_from 3.231.2.0/25;
38+
set_real_ip_from 3.234.232.224/27;
4739
set_real_ip_from 13.32.0.0/15;
48-
set_real_ip_from 13.224.0.0/14;
4940
set_real_ip_from 13.35.0.0/16;
50-
set_real_ip_from 204.246.164.0/22;
51-
set_real_ip_from 204.246.168.0/22;
52-
set_real_ip_from 71.152.0.0/17;
53-
set_real_ip_from 216.137.32.0/19;
54-
set_real_ip_from 205.251.249.0/24;
55-
set_real_ip_from 99.86.0.0/16;
56-
set_real_ip_from 52.46.0.0/18;
57-
set_real_ip_from 52.84.0.0/15;
58-
set_real_ip_from 204.246.173.0/24;
59-
set_real_ip_from 130.176.0.0/16;
60-
set_real_ip_from 64.252.64.0/18;
61-
set_real_ip_from 204.246.174.0/23;
62-
set_real_ip_from 64.252.128.0/18;
63-
set_real_ip_from 205.251.254.0/24;
64-
set_real_ip_from 143.204.0.0/16;
65-
set_real_ip_from 205.251.252.0/23;
66-
set_real_ip_from 204.246.176.0/20;
67-
set_real_ip_from 13.249.0.0/16;
68-
set_real_ip_from 54.240.128.0/18;
69-
set_real_ip_from 205.251.250.0/23;
70-
set_real_ip_from 52.222.128.0/17;
71-
set_real_ip_from 54.182.0.0/16;
72-
set_real_ip_from 54.192.0.0/16;
73-
set_real_ip_from 13.124.199.0/24;
74-
set_real_ip_from 34.226.14.0/24;
75-
set_real_ip_from 52.15.127.128/26;
76-
set_real_ip_from 35.158.136.0/24;
77-
set_real_ip_from 52.57.254.0/24;
78-
set_real_ip_from 18.216.170.128/25;
79-
set_real_ip_from 13.52.204.0/23;
8041
set_real_ip_from 13.54.63.128/26;
8142
set_real_ip_from 13.59.250.0/26;
82-
set_real_ip_from 13.210.67.128/26;
83-
set_real_ip_from 35.167.191.128/26;
84-
set_real_ip_from 52.47.139.0/24;
85-
set_real_ip_from 52.199.127.192/26;
86-
set_real_ip_from 52.212.248.0/26;
87-
set_real_ip_from 52.66.194.128/26;
8843
set_real_ip_from 13.113.203.0/24;
89-
set_real_ip_from 99.79.168.0/23;
44+
set_real_ip_from 13.124.199.0/24;
45+
set_real_ip_from 13.210.67.128/26;
46+
set_real_ip_from 13.224.0.0/14;
47+
set_real_ip_from 13.228.69.0/24;
48+
set_real_ip_from 13.249.0.0/16;
49+
set_real_ip_from 18.200.212.0/23;
50+
set_real_ip_from 18.216.170.128/25;
9051
set_real_ip_from 34.195.252.0/24;
91-
set_real_ip_from 35.162.63.192/26;
52+
set_real_ip_from 34.216.51.0/25;
9253
set_real_ip_from 34.223.12.224/27;
93-
set_real_ip_from 52.56.127.0/25;
9454
set_real_ip_from 34.223.80.192/26;
95-
set_real_ip_from 13.228.69.0/24;
96-
set_real_ip_from 34.216.51.0/25;
97-
set_real_ip_from 3.231.2.0/25;
98-
set_real_ip_from 54.233.255.128/26;
99-
set_real_ip_from 18.200.212.0/23;
55+
set_real_ip_from 34.226.14.0/24;
56+
set_real_ip_from 34.232.163.208/29;
57+
set_real_ip_from 35.158.136.0/24;
58+
set_real_ip_from 35.162.63.192/26;
59+
set_real_ip_from 35.167.191.128/26;
60+
set_real_ip_from 36.103.232.0/25;
61+
set_real_ip_from 36.103.232.128/26;
62+
set_real_ip_from 52.15.127.128/26;
63+
set_real_ip_from 52.46.0.0/18;
64+
set_real_ip_from 52.47.139.0/24;
10065
set_real_ip_from 52.52.191.128/26;
66+
set_real_ip_from 52.56.127.0/25;
67+
set_real_ip_from 52.57.254.0/24;
68+
set_real_ip_from 52.66.194.128/26;
10169
set_real_ip_from 52.78.247.128/26;
70+
set_real_ip_from 52.82.128.0/19;
71+
set_real_ip_from 52.84.0.0/15;
72+
set_real_ip_from 52.124.128.0/17;
73+
set_real_ip_from 52.199.127.192/26;
74+
set_real_ip_from 52.212.248.0/26;
10275
set_real_ip_from 52.220.191.0/26;
103-
set_real_ip_from 34.232.163.208/29;
76+
set_real_ip_from 52.222.128.0/17;
77+
set_real_ip_from 54.182.0.0/16;
78+
set_real_ip_from 54.192.0.0/16;
79+
set_real_ip_from 54.230.0.0/16;
80+
set_real_ip_from 54.233.255.128/26;
81+
set_real_ip_from 54.239.128.0/18;
82+
set_real_ip_from 54.239.192.0/19;
83+
set_real_ip_from 54.240.128.0/18;
84+
set_real_ip_from 58.254.138.0/25;
85+
set_real_ip_from 58.254.138.128/26;
86+
set_real_ip_from 64.252.64.0/18;
87+
set_real_ip_from 64.252.128.0/18;
88+
set_real_ip_from 65.8.0.0/16;
89+
set_real_ip_from 65.9.0.0/17;
90+
set_real_ip_from 65.9.128.0/18;
91+
set_real_ip_from 70.132.0.0/18;
92+
set_real_ip_from 71.152.0.0/17;
93+
set_real_ip_from 99.79.169.0/24;
94+
set_real_ip_from 99.84.0.0/16;
95+
set_real_ip_from 99.86.0.0/16;
96+
set_real_ip_from 111.51.66.0/24;
97+
set_real_ip_from 116.129.226.0/25;
98+
set_real_ip_from 116.129.226.128/26;
99+
set_real_ip_from 118.193.97.64/26;
100+
set_real_ip_from 118.193.97.128/25;
101+
set_real_ip_from 119.147.182.0/25;
102+
set_real_ip_from 119.147.182.128/26;
103+
set_real_ip_from 120.52.12.64/26;
104+
set_real_ip_from 120.52.22.96/27;
105+
set_real_ip_from 120.52.39.128/27;
106+
set_real_ip_from 120.52.153.192/26;
107+
set_real_ip_from 120.232.236.0/25;
108+
set_real_ip_from 120.232.236.128/26;
109+
set_real_ip_from 120.253.240.192/26;
110+
set_real_ip_from 120.253.241.160/27;
111+
set_real_ip_from 120.253.245.128/26;
112+
set_real_ip_from 120.253.245.192/27;
113+
set_real_ip_from 130.176.0.0/16;
114+
set_real_ip_from 143.204.0.0/16;
115+
set_real_ip_from 144.220.0.0/16;
116+
set_real_ip_from 180.163.57.0/25;
117+
set_real_ip_from 180.163.57.128/26;
118+
set_real_ip_from 204.246.164.0/22;
119+
set_real_ip_from 204.246.168.0/22;
120+
set_real_ip_from 204.246.172.0/24;
121+
set_real_ip_from 204.246.173.0/24;
122+
set_real_ip_from 204.246.174.0/23;
123+
set_real_ip_from 204.246.176.0/20;
124+
set_real_ip_from 205.251.200.0/21;
125+
set_real_ip_from 205.251.208.0/20;
126+
set_real_ip_from 205.251.249.0/24;
127+
set_real_ip_from 205.251.250.0/23;
128+
set_real_ip_from 205.251.252.0/23;
129+
set_real_ip_from 205.251.254.0/24;
130+
set_real_ip_from 210.51.40.0/24;
131+
set_real_ip_from 216.137.32.0/19;
132+
set_real_ip_from 223.71.11.0/27;
133+
set_real_ip_from 223.71.71.96/27;
134+
set_real_ip_from 223.71.71.128/25;
104135

105136
gzip on;
106137
gzip_comp_level 2;

0 commit comments

Comments
 (0)