[KomoD]

I mean if you are using Cloudflare with their proxy, so origin<>cloudflare<>client

[capableweb]

Yeah, then you'd just block based on the client IP which is in a header, rather than the IP on the connection.