CloudFront Support

CloudFront explains there IP ranges here.

Add CloudFront IPv4 addresses:

nano /vddos/conf.d/cdn-ip.conf

# AWS CloudFront IPv4 addresses
set_real_ip_from 10.0.0.0/8;
set_real_ip_from 52.84.0.0/15;
set_real_ip_from 54.182.0.0/16;
set_real_ip_from 54.192.0.0/16;
set_real_ip_from 54.230.0.0/16;
set_real_ip_from 54.239.128.0/18;
set_real_ip_from 54.239.192.0/19;
set_real_ip_from 54.240.128.0/18;
set_real_ip_from 204.246.164.0/22;
set_real_ip_from 204.246.168.0/22;
set_real_ip_from 204.246.174.0/23;
set_real_ip_from 204.246.176.0/20;
set_real_ip_from 205.251.192.0/19;
set_real_ip_from 205.251.249.0/24;
set_real_ip_from 205.251.250.0/23;
set_real_ip_from 205.251.252.0/23;
set_real_ip_from 205.251.254.0/24;
set_real_ip_from 216.137.32.0/19;
real_ip_recursive on;

NOTE: Remember to leave "real_ip_header X-Forwarded-For;" at the end of the file like this article.