Hello. I had a discourse forum which got ddos’d to hell last month (it’s basically a community about news, and what got me ddos’d was the posting of news about ecuadorean protests a month ago. Real eyeopener too). Anyway, this is basically a “hobby” of mine and I don’t really have the money to pay …

Configure UFW and if necessary put it behind Cloudflare with a page rule to “disable performance” so that it doesn’t screw around with the code.

Thank you. Can you elaborate on both ideas? 1)What would be a good configuration for ufw with discourse? should i allow port 80 as well or only 224? 2)What would that page rule look like?

This is the one good use case for Cloudflare. But you have to be unbelievably careful that you don’t leak the IP address because if you do it is game over.

[صورة] Stephen: put it behind Cloudflare with a page rule to “disable performance” so that it doesn’t screw around with the code. So in this case the cloud icon can be turned orange right ? If the performance disabled by page rules ?

That means using cloudflare for “everything” in the forum, so to speak?. I have cloudlfare in almost standard configuration and works fine. However some posts here recommend “enable this, disable that”, shich makes me fear exactly that: leaking ip. I disabled “rocket” something and “minification”…

Create a page rule which looks like this: [صورة] That will disable everything that can tamper with the code today, and in the future. If you want to create a caching rule for /uploads/ to save some server transfer that’s fine too.

[صورة] codinghorror: But you have to be unbelievably careful that you don’t leak the IP address because if you do it is game over. Beyond what @Stephen mentioned above, do I need to do anything else to prevent leaking of IP?

There are a few more recent topics that cover this. [صورة] How to protect a server's IP from being exposed? Self-hosting My forum has CloudFlare and when inserting a URL from this service, I can get the real IP of my server, this is a big gift for DDoS attacks…

Without going through a service like Cloudflare, I presume Discourse out of the box doesn’t leak IP in any way?

كيفية منع هجمات DDoS على نسخة Discourse؟

الدعم

HAWK (Hawk) 14 مارس 2022، 3:28ص 9

هناك عدد قليل من المواضيع الأحدث التي تغطي هذا.

الموضوع		الردود	مرات العرض
How to solve the problem of source IP leakage and DD attacks even when using Cloudflare CDN? Support	10	476	15 سبتمبر 2024
Using Discourse with Cloudflare: Best Practices Self-Hosting how-to , cloudflare	28	5524	26 أبريل 2026
IPTables and UFW problems Self-hosting	10	321	20 يونيو 2024
Only allow Cloudflare IPs for Discourse server Self-hosting	15	3793	22 سبتمبر 2017
Is there any chance use cloudflare without modify anything? Support	2	554	29 يونيو 2020

كيفية منع هجمات DDoS على نسخة Discourse؟

الموضوعات ذات الصلة