Is CLOUDFLARENET traffic included in Rate Limit billing?

This post was flagged by the community and is temporarily hidden.

I am not sure about your question. The IP block you mentioned is a proxy block. Requests will always come from these addresses but you shouldn’t get requests from there to the public proxy addresses.

I have hits like these in my access log:

173.245.54.237 - - [25/Jun/2020:09:07:20 +0000] “GET /parenting/ HTTP/1.1” 200 13955 “-” “Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Safari/537.36” 411735
173.245.54.237 - - [25/Jun/2020:09:10:53 +0000] “GET /make-a-payment/ HTTP/1.1” 200 13074 “-” “Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Safari/537.36” 348397
173.245.54.237 - - [25/Jun/2020:09:15:36 +0000] “GET /reach-me/ HTTP/1.1” 200 11528 “-” “Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Safari/537.36” 334016
173.245.54.237 - - [25/Jun/2020:09:20:38 +0000] “GET /reach-me%20 HTTP/1.1” 301 - “-” “Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.116 Safari/537.36” 414006

and 173.245.54.237 is a CLOUDFLARENET IP, per ARIN. I also have the usual user IPs from Comcast, AT&T, etc and Googlebot, Bingbot, etc. I assumed these IPs were Cloudflare scanning and I whitelisted them based on the public whitelist Cloudflare provides. If these are legit and expected, my q was is their traffic counted in rate limiting; if they are not legit, what are they?

That is because you are not rewriting IP addresses. These are regular requests which come via the proxies.

But I see the expected 66.249.69.62 from Googlebot, I see my 77.x.x.x IP from my ISP, I see Bing IPs from Bing, etc.

So is your server configured to rewrite addresses or not?

I’ll figure it out myself thanks. I have zero tolerance for rude.

I don’t think it’s something user related, if you are rewriting the IPs and blocking all non-Cloudflare IPs from connecting.

I can suggest a couple of things, try checking is the IPs are being rewritten (and if you are actually connecting to the server via Cloudflare or not) and then change the logging to include the cf-ray and cf-connecting-ip header, so that we have a bit more insights.

Excuse me? I asked a simple question, there was zero rudeness. On the contrary one could argue there was a please and thank you missing in the original message, if one really looks out for politeness.

PLEASE just close.

THANK YOU.