# Nginx bouncer ban type

**URL:** https://discourse.crowdsec.net/t/nginx-bouncer-ban-type/694
**Category:** Uncategorized
**Created:** [March 16, 2022, 11:23pm UTC](https://discourse.crowdsec.net/t/nginx-bouncer-ban-type/694 "2022-03-16T23:23:02Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![lordraiden](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/lordraiden/32/315_2.png) [@lordraiden](https://discourse.crowdsec.net/u/lordraiden)
#### Post date: [March 16, 2022, 11:23pm UTC](https://discourse.crowdsec.net/t/nginx-bouncer-ban-type/694/1 "2022-03-16T23:23:02Z")

</div>

Does the Nginx boucer bans the connection at the webserver level or at ip table level?

I have cloudflare → nginx (crowdsec bouncer) → website, I have it configured so at the log level in nginx I get the real IP and not the cloudflare IP. So the bouncer and crowdsec see the real IP and not the cloudflare proxy IP, and it bans the real IP.

I know there is a bouncer for cloudflare but I prefer this way

---

<div class="post-metadata">

### Author: ![thibault](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/thibault/32/2_2.png) [@thibault](https://discourse.crowdsec.net/u/thibault)
#### Post date: [March 17, 2022, 7:48am UTC](https://discourse.crowdsec.net/t/nginx-bouncer-ban-type/694/2 "2022-03-17T07:48:09Z")

</div>

Hello,

Nginx bouncer does at the webserver level, so that if your x-forwarded-for is correctly configured, it will block on the real ip, not cf’s proxy ip 🙂