Konfiguration des ausgehenden Proxy

[SystemZ (Michał Frąckiewicz)]

Hat sich in neueren Versionen von Discourse etwas geändert?
Gibt es nun eine einfache Möglichkeit, einen ausgehenden Proxy einzurichten?

Es ist wichtig, die Origin-IP vor Angreifern zu verbergen, damit der Cloudflare-Schutz korrekt funktioniert.

Verwandte Themen:

Discourse Link previews through a proxy server?

Sure, but which of those 4 billion IPs is the right one if you can’t tell them apart? With proper opsec (e.g. firewall rules to only allow Cloudflare in and whitelisted traffic out) means you will be pretty safe. Until you aren’t because you missed a leak For example, better proxy all your DNS as well.

Hiding the origin on cloudflare

While researching Cloudflare and best practices to use to protect my server I ran into an article by Cloudflare about protecting the origin IP (the IP where the website is actually being ran from) because you would be able to circumvent all of Cloudflares ddos protection if you had it. What interested me was specifically this section: Never initiate an outbound connection based on user action If the attacker can get your web server to connect to an arbitrary address, they will reveal your …

Ich kann bei Bedarf zum Code beitragen. Ich brauche lediglich einige Hinweise dazu, welcher Code refaktoriert werden muss, um Proxy-Einstellungen zu verwenden.