# Reverse proxy for Discourse | Real IP masking **URL:** https://meta.discourse.org/t/reverse-proxy-for-discourse-real-ip-masking/275611 **Category:** Self-hosting **Created:** [August 17, 2023, 8:08pm UTC](https://meta.discourse.org/t/reverse-proxy-for-discourse-real-ip-masking/275611 "2023-08-17T20:08:47Z") **Posts on this page:** 1 **Showing post:** 10
### Author: ![vifyirusti](https://avatars.discourse-cdn.com/v4/letter/v/bc8723/32.png) [@vifyirusti](https://meta.discourse.org/u/vifyirusti) #### Post date: [August 19, 2023, 2:00am UTC](https://meta.discourse.org/t/reverse-proxy-for-discourse-real-ip-masking/275611/10 "2023-08-19T02:00:39Z")
> [@How to protect a server's IP from being exposed?](https://meta.discourse.org/t/how-to-protect-a-servers-ip-from-being-exposed/217424): > > My forum has CloudFlare and when inserting a URL from this service, I can get the real IP of my server, this is a big gift for DDoS attacks. I checked it on the Discourse Meta and this forum don’t have URL-filtration too. Blocked domain by IPlogger can’t help because the attacker can use a custom domain using the script for logger ip address. I think need use whitelist to filter domain who can use onebox. Example: if admin allow only url from Youtube, Twitter, Imgur, all other ur… Actually, I’m talking about the above. A URL can be created with the help of the tool available at “[iplogger.org](http://iplogger.org)”. When you take this URL and place it in the thread in the discourse forum, you can learn the real IP address of the server. Because the VPS where discourse is installed is making a direct request to the connection placed inside the topic. This allows the server’s real IP address to be exposed. In the topic below, it says that a proxy server should be set up for outgoing requests from the server. > [@Discourse Link previews through a proxy server?](https://meta.discourse.org/t/discourse-link-previews-through-a-proxy-server/72720/8): > > Yes you will need to set up a proxy for outgoing traffic on your server this has nothing to do with us. --- _[View the full topic](https://meta.discourse.org/t/reverse-proxy-for-discourse-real-ip-masking/275611)._