Configuração de proxy de saída

[SystemZ (Michał Frąckiewicz)]

Houve alguma mudança nas versões mais recentes do Discourse?
Existe agora uma maneira fácil de configurar um proxy de saída?

É importante ocultar o IP de origem de atacantes para que a proteção do Cloudflare funcione corretamente.

Tópicos relacionados:

Discourse Link previews through a proxy server?

Sure, but which of those 4 billion IPs is the right one if you can’t tell them apart? With proper opsec (e.g. firewall rules to only allow Cloudflare in and whitelisted traffic out) means you will be pretty safe. Until you aren’t because you missed a leak For example, better proxy all your DNS as well.

Hiding the origin on cloudflare

While researching Cloudflare and best practices to use to protect my server I ran into an article by Cloudflare about protecting the origin IP (the IP where the website is actually being ran from) because you would be able to circumvent all of Cloudflares ddos protection if you had it. What interested me was specifically this section: Never initiate an outbound connection based on user action If the attacker can get your web server to connect to an arbitrary address, they will reveal your …

Posso contribuir com o código, se necessário. Só preciso de algumas dicas sobre quais partes do código precisam ser refatoradas para usar algum tipo de configuração de proxy.