Cloudflare?

[Allenafaith]

Does any of you use this for security/protection on your forum?

I used to use it, but then for some reason, it changed all of the IPs on my forum to the same thing, so it was hard to tell when someone was a dupe, etc, because of that. I ended up removing it completely.

 

[Cosmic]

CloudFlare is a good service. I hear that their network as a whole is now large enough to absorb a DDoS attack from any known botnet!

Note that they can only really provide DDoS protection, though. Just using CloudFlare is not a comprehensive security solution.

I used to use it, but then for some reason, it changed all of the IPs on my forum to the same thing, so it was hard to tell when someone was a dupe, etc, because of that. I ended up removing it completely.

Contact your host's support. They need to install an apache mod to enable Cliudflare support.

 

[John]

^ That.

CloudFlare is amazing. It's almost impossible to be DDoSed, which used to be pretty common back in the day.

 

[Cierra]

I have the free plan and it works well for my needs. I like knowing it is there in a form of added protection alongside other things. Although, I do think those Cloudflare DDos waiting screens are annoying.

 

[Allenafaith]

CloudFlare is a good service. I hear that their network as a whole is now large enough to absorb a DDoS attack from any known botnet!

Note that they can only really provide DDoS protection, though. Just using CloudFlare is not a comprehensive security solution.

I used to use it, but then for some reason, it changed all of the IPs on my forum to the same thing, so it was hard to tell when someone was a dupe, etc, because of that. I ended up removing it completely.

Contact your host's support. They need to install an apache mod to enable Cliudflare support.

My hosts support is terrible. I go out of my way to not have to contact them. :/

 

[Luiz187]

CloudFlare is a good service. I hear that their network as a whole is now large enough to absorb a DDoS attack from any known botnet!

Note that they can only really provide DDoS protection, though. Just using CloudFlare is not a comprehensive security solution.

I used to use it, but then for some reason, it changed all of the IPs on my forum to the same thing, so it was hard to tell when someone was a dupe, etc, because of that. I ended up removing it completely.

Contact your host's support. They need to install an apache mod to enable Cliudflare support.

Although its true that cloudflare is a very good service it cant defend against any known botnet. Cloudflare has actually gone down due to massive DDoS attacks in the past.


As said before, Cloudflare doesnt protect websites from Forum, blog, SQL, XSS and other security vulnerabilities that may exist on your website. As far as i know it also doesnt protect websites from SSH, FTP and SMTP port attacks. It really just for DDoS protection.

Anyway, i used to use cloudflare when i had a website. It was useful, but its still possible to find the servers real ip behind cloudflare. So an experienced hacker could still take my website down.

 

[Cosmic]

It's probably best not to use Cloudflare then, if you don't have the apache mod installed which fixes the IPs. To most forums, detecting duplicate accounts is more important than stopping DDoS attacks.

 

[KnownSyntax]

Apache mod has nothing to do with the issue. You need to find a few lines of code and change them depending on what software you are using. This is due to MANY forum systems using the FORWARD-HEADER IP's information as the actual IP, when in realitiy CloudFlare and other proxy services will forward over the host's real IP using the X-FORWARD-HEADER option. Just change it inside of the admin panel and re-login. You should be fine if the software is MyBB 1.8.x (with other forums you need to manually edit some files which I can tell you where and what to edit to make it work perfectly).

 

[remember245]

Affected about the common IP : this is a small matter , but certainly the large SEO-er or to the left . Since using CloudFlare , you will be given general IP with hundreds of other sites , as well as the use of shared hosting with common IP . If unlucky , common IP blacklist the domain was also adversely affected to a certain degree

 

[nathanielrsuchy]

CloudFlare sends the real IP Address to your site. You just have to select it instead of CloudFlare's IP Address. See: https://support.cloudflare.com/hc/e...-does-CloudFlare-handle-HTTP-Request-headers-. It explains everything you need to know about the headers. I sent you a PM with an offer for help if you decide you want to use CloudFlare and see real IP Addresses 🙂