about cf loadbalacner.
if I am using cf loadbalacner is there any chance people can know the ip of my server from my domain or 0 chance ?
I know some site there bruteforce domain matching all possible ips that won't work right ?
4 Replies
Either using LB or just normal proxy, you need to take steps to secure your origin server:
https://developers.cloudflare.com/fundamentals/basic-tasks/protect-your-origin-server/
At the minimum, only allow Cloudflare IP Addresses to your web server (usually 80/443):
https://developers.cloudflare.com/fundamentals/concepts/cloudflare-ip-addresses/
so for this. I need a origin server vps service that provides network level firewall right /
You can just use a software firewall like ufw
GitHub
GitHub - Paul-Reed/cloudflare-ufw: Script to update UFW with Cloudf...
Script to update UFW with Cloudflare IPs. Contribute to Paul-Reed/cloudflare-ufw development by creating an account on GitHub.