3 ms·
They cloak my origin.
by danneu 10y ago
They cloak my origin.
- mikecke 10y agoCloudFlare passes your origin.
- manigandham 10y agoHow so?
- tyho 10y agoX-Forwarded-For https://support.cloudflare.com/hc/en-us/articles/200170706-How-do-I-restore-original-visitor-IP-with-Nginx- https://support.cloudflare.com/hc/en-us/articles/200170706-H...
- detaro 10y agowrong direction. Reveals client IP to server, not server IP to client.
- dylz 10y agoIf you are on free/pro (ddos protection starts on business+ iirc) they will just pass through your A record unproxied after attacked
- manigandham 10y agoAll plans have protection, free has lower limits but still substantial. Pro has higher limits and Business is unlimited. Given the pricing, that's very fair. They won't automatically unproxy you without notice. If you're getting attacked, you need to pay for the level of protection you need.
- joepie91_ 10y ago> They won't automatically unproxy you without notice. Author here. They've done precisely that to me in the past. I don't have first-hand experience with their current policies (if they have changed at all), but still hear similar stories with some regularity.
- manigandham 10y agoSince this is a core part of their business, I don't see how they would risk it with this tactic. If you have evidence, let's see the details.
- joepie91_ 10y agoSure: https://i.imgur.com/NDDhlVc.png https://i.imgur.com/NDDhlVc.png
- danneu 10y agoLooks like it wasn't until 2013 that Cloudflare became serious about origin protection and a more universal anti-DDoS service: https://blog.cloudflare.com/ddos-prevention-protecting-the-origin/ https://blog.cloudflare.com/ddos-prevention-protecting-the-o... https://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet/ https://blog.cloudflare.com/the-ddos-that-almost-broke-the-i... I'd like to know if people are still getting that email.
- deleted 10y ago[deleted]
- danneu 10y agoThe only thing I've seen these days is Cloudflare lifting your service to "Under Attack mode" accompanied with an email saying that they will suspend your account if you toggle it off during the attack.
- zepolen 10y agoTell me your domain, I'll tell you your origin in 5 seconds.
- danneu 10y agoExplain? The only ways I can think of finding the origin involve user error: 1. DNS history lookup where they're still using the same IP address. 2. Scanning the internet where they aren't ignoring non-Cloudflare requests. You can file an abuse or DMCA request to Cloudflare, but they only reveal your provider.