Hiding backend of website?

[margfolio]

Hi guys,

I've been using Cloudflare on my new Bitcoin casino site, and it's been starting to get off the ground and make me some profit. However, it seems that I am getting DDoS attacks left and right. I (used to) think that Cloudflare hides the IP, but apparently is does not (a simple search for a Cloudflare resolver will yield results like https://stresser.io/cloudflare-resolver and others) and I'm getting fucked over.

I'm currently hosting on ReliableSite.net for the backend and it is supposed to be protected by Cloudflare but these guys have gotten my backend IP. Do you guys have any suggestions on what to do next? I've already requested a new IP but want to protect this one from the DDoSers.

[kolloh]

Cloudflare will mask the IP as long as you don't have subdomains which go directly to the main IP. You should be sure to disable those in Cloudflare's settings if you do have them. Things like mail and MX records should also not point to the actual server in question. You'll need to use remote MX records for mail through Gmail or Outlook for example.