Yes, I using CloudFlare and added it's IP as trusted.
This means anybody from CloudFlare is now trusted and I cannot protect my site from DDoS? I just need real visitors IPs.
I use nginx on another server and never has problems like this. My server under HTTP-flood, in nginx I can just use...