I have a problem with hiding the VPS IP using Cloudflare. My IP can be found on search.censys.io. I don't have any DNS leaks. I'm using nginx to reverse proxy a node.js server. Is it possible to hide the IP somehow to protect against DDoS and other attacks?
2
-
Welcome to the community. If your DNS records used to point to your origin server in the past, historical data might expose your real server IP...– Sir MuffingtonFeb 27 at 17:33
-
More than DNS can leak information. For example default status pages can. See : security.stackexchange.com/questions/148450/…– BrianMar 29 at 17:30
Add a comment
|
1 Answer
If you're sure that you don't have any DNS records that reveal the IP address of your VPS web server, then you've done all you can to hide your IP address. If your server's IP address is somehow known by other sites, you can try to petition them to stop publicizing it, but that's likely to be an uphill battle.
Instead of trying to hide your server's IP address, why not simply use your VPS provider's firewall to block all incoming connections to your server's IP address, except those originating from Cloudflare's network? This will mitigate the attacks that you described in your question. See Does Cloudflare masking my IP make my server more secure? for more info.
