4 ms·

The benefit is this will allow people who previously had to reveal their origin IP (that is non business class users) in order to support websockets will now be

The benefit is this will allow people who previously had to reveal their origin IP (that is non business class users) in order to support websockets will now be able to hide origin behind cloudflare. Cloudflare can't protect you from DOS attacks if the attacker knows the IP address of your origin.

mmaunder 10y ago
http://viewdns.info/iphistory/ http://viewdns.info/iphistory/
- izak30 10y ago
  Pretty trivial to get a new IP address these days.
  - chinathrow 10y ago
    IP enumaration is also pretty trivial. I guess that what attackers might be using to "unhide" domains. Scan the net and request the required domain name?
    - seabee 10y ago
      That won't work if the origin firewall allows only CloudFlare IP ranges.
    - homero 10y ago
      Maybe but this helps https://support.cloudflare.com/hc/en-us/articles/204899617 https://support.cloudflare.com/hc/en-us/articles/204899617
- CiPHPerCoder 10y ago
  http://viewdns.info/iphistory/?domain=paragonie.com http://viewdns.info/iphistory/?domain=paragonie.com Nope.