Webmasters Stack Exchange is a question and answer site for webmasters. It only takes a minute to sign up.
Sign up to join this community
Picture a politically hot website that might be subject to a DDOS attack. If that site is hosted at examplehosting.com and then uses cloudflare or another CDN, is the hosting service vulnerable to a DDOS attack on the site?
I do understand that the host could be discovered via DNS settings and attacked directly unless something was done to obscure the host IP address.
If set up correctly and securely the actual site is not significantly vulnerable to a DDOS attack, although depending on the way the site is written and how dedicated the attackers are there may be some limited exposure to the final site if the DDDOS attack can find a way to do the attack through Cloudflare.
A point of Cloudflare is that they can't discover the actual site via DNS settings - they would need to find it an alternative way because the DNS points to Cloudflare - which would be hard but might be exposed through scouring the web or if your site can be hacked and the final IP exposed. You can greatly limit the attack vector by only allowing Cloudflare IPs to connect to your webserver using some kind of firewall.
