Configuration outbound proxy

[SystemZ (Michał Frąckiewicz)]

Anything changed in newer versions of Discourse?
Is there now an easy way to setup outgoing proxy?

Is important to hide origin IP from attackers if Cloudflare protection must work correctly.

Related topics:

Discourse Link previews through a proxy server?

Sure, but which of those 4 billion IPs is the right one if you can’t tell them apart? With proper opsec (e.g. firewall rules to only allow Cloudflare in and whitelisted traffic out) means you will be pretty safe. Until you aren’t because you missed a leak For example, better proxy all your DNS as well.

Hiding the origin on cloudflare

While researching Cloudflare and best practices to use to protect my server I ran into an article by Cloudflare about protecting the origin IP (the IP where the website is actually being ran from) because you would be able to circumvent all of Cloudflares ddos protection if you had it. What interested me was specifically this section: Never initiate an outbound connection based on user action If the attacker can get your web server to connect to an arbitrary address, they will reveal your …

I can contribute to code if it’s necessary, I just need some tips which code needs to be refactored to use some kind of proxy settings.