5 ms·
As this is a DNS based service, If I were a hacker, couldn't I just skip all the protection CloudFlare offers by hardwiring the website's domain + IP in my host
by kitcar 15y ago
As this is a DNS based service, If I were a hacker, couldn't I just skip all the protection CloudFlare offers by hardwiring the website's domain + IP in my hosts file?
- kondro 15y agoCloudFlare is actually a CDN proxy, so you could overcome this by hardwiring your web server firewall rules to the CloudFlare platform.
- kitcar 15y agoAh, so basically use IPTables to detect if the request is originating from CloudFlare's CDN, and if it is not redirect it via CloudFlare?
- blantonl 15y agoNo, you would configure your firewall to only allow requests from CloudFlare's infrastructure.
- DisposaBoy 15y agoIn that case why don't you?/they? just offer proper hosting because if you're gonna go that far you're just wasting bandwidth, money and other resources aren't you?