> If a Cloudflare customer has configured their origin server to respond only to... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		abiro on April 4, 2021 \| parent \| context \| favorite \| on: How to bypass Cloudflare bot protection > If a Cloudflare customer has configured their origin server to respond only to Cloudflare IPs, then they MUST also verify that the "Host" header on any request actually matches their domain name. Where is this documented?

toredash on April 4, 2021 [–]

I'm 100% sure it isn't. Cloudflare docs are not great, and as a Enterprise customer I spend more time with support than needed as a result.

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact