# Masquer l'origine sur Cloudflare **URL:** \ **Category:** Product Support\ **Created:** [Août 12, 2018, 12:20 UTC](https://meta.discourse.org/t/hiding-the-origin-on-cloudflare/94496 "2018-08-12T00:20:35Z")\ **Posts on this page:** 1\ **Showing post:** 1
**Author:** ![imaBASKET](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/imabasket/32/72987_2.png) [@imaBASKET](https://meta.discourse.org/u/imaBASKET)\ **Post date:** [Août 12, 2018, 12:20 UTC](https://meta.discourse.org/t/hiding-the-origin-on-cloudflare/94496/1 "2018-08-12T00:20:36Z")
While researching Cloudflare and best practices to use to protect my server I ran into an article by Cloudflare about protecting the origin IP (the IP where the website is actually being ran from) because you would be able to circumvent all of Cloudflares ddos protection if you had it. > **[DDoS Prevention: Protecting The Origin](https://blog.cloudflare.com/ddos-prevention-protecting-the-origin/)** > > One of the many great features that CloudFlare provides is protection from Distributed Denial of Service (DDoS) attacks. A malicious party who wants to make your website or web service unavailable could try to overwhelm it with requests from... What interested me was specifically this section: > **Never initiate an outbound connection based on user action** > If the attacker can get your web server to connect to an arbitrary address, they will reveal your origin IP. Features like “upload from URL” that allow the user to upload a photo from a given URL should be configured so that the server doing the download is not the website origin server. This is important because if an attacker can choose the URL entered, they can set up a web site specifically to monitor who connects to it, or use a public service that monitors the IPs that contact unique URLs. I have tested this and indeed it does appear to get the origin IP from the server when uploading a remote image, so my question is what if anything can I do to stop that? --- _[View the full topic](https://meta.discourse.org/t/hiding-the-origin-on-cloudflare/94496)._