Cloudflare and BunnyCDN origin lock Print

Origin lock accepts HTTP/HTTPS only from official CDN ranges. Direct hits to the server IP on 80/443 are dropped.

1. Confirm orange-cloud DNS already works.
2. DDoS / CDN → Refresh CF IPs (lsf --cf-refresh).
3. Set CF_ORIGIN_ONLY=1 in lsf.conf.
4. Enable / Restart.

Same pattern for Bunny: Refresh Bunny IPs and BUNNY_ORIGIN_ONLY=1. Refresh often — Bunny edges rotate. If a refresh leaves the list empty, LSF skips origin-lock instead of dropping all HTTP.