3 ms·
You need to block 443 for any other IP than Cloudflare. The IP list can be found at https://www.cloudflare.com/ips/ https://www.cloudflare.com/ips/.
by renonce 4y ago
You need to block 443 for any other IP than Cloudflare. The IP list can be found at https://www.cloudflare.com/ips/ https://www.cloudflare.com/ips/.
- dingdongthe 4y agoand/or use Authenticated Origin Pulls with a TLS client certificate.
- renonce 4y agoThat would leak your IP nevertheless. People can figure out that you're serving a specific website by inspecting your certificate on handshake without actually connecting.