Hacker News Reader

> Many CDNs however suggest that your origin is contacted by nobody except the CDN itself (not true for CloudFlare, though).

CloudFlare does as well. See https://blog.cloudflare.com/ddos-prevention-protecting-the-o...

View on HN

Only within the scope of DDoS protection. There's no use relying on Cloudflare to keep your site up in that scenario while publicly broadcasting your real server IP, ripe and defenceless, at direct.mydomain.com

Reply on news.ycombinator.com