I spent multiple days getting SYN flooded to the point my router would crash and reboot over and over, and it stopped the moment I set up cloudflare and asked my ISP to change my IP. This was the instance which pushed me over the edge, but there had been smaller attacks lasting a few minutes each for years leading up to this.

As someone else who used to host via an open port, you get random connections all the time. Almost constantly and the request paths make it obvious they are scanning for vulnerabilities. Via cloud flare the number of those requests is much lower, as they have to know at least the DNS to do so, (and can't guess it from a presented SSL cert.)

It's the reason I set up cloudflare in the first place, so yeah. I was getting SYN flood-ed to the point that my router would just crash almost immediately, and after rebooting it the attack would resume after a minute or two.

How do I stop a DDOS attack of my website without having port 80 or 443 open, so you can access the website?

Conservatives will get really upset once they realize you are changing genders

What's a good VPS provider for privacy enthusiasts?

That doesn't help against a SYN flood.

Awesome project, but that's just one of many features CF offers. Most people I suspect rely on tunnels more than bot protection.

Basically they work as a bouncer in front of your website and stop all the undesirables getting in. I.e. AI scrapers. Also if somebody decides they want to try and hack you or otherwise cause problems the bouncer beats them up and you never have to hear about it.

If you use a VPN the bouncer is very suspicious of you and you have to jump through all sorts of hoops to get in, which is why some people don't like websites using it. Unfortunately there isn't really a solution since there are a lot of illegitimate uses for having a VPN connection as well, so you have to be suspicious of them.

You use it as reverse proxy, to not expose your hosting servers (e.g. websites, Lemmy instances or what not) directly to the Internet. The idea is that they take care of a lot of security concerns for you, which can otherwise be very demanding if you are self hosting

Their DDoS protection is unmatched

mTLS would solve your entire man in the middle problems.

That's what they're saying. They're dependent on cloudflare who offer a DNS service that routes traffic to one of their static ips, down a tunnel initiated by the server without an IP address.

I use cloudflares tunneling service cloud flared which allowes me to have the service running on my home server and then cloudflare will automatically make the subdomains point towards the ip