• I have successfully setup a subdomain WordPress multisite. I have a few concerns that I am not sure and I want to solve it ASAP.

    1. Since I want to use subdomain multisite, I need to allow wildcard in my DNS. I am using Cloudflare to manage all my domains. So, I put * to my A record. However, in Cloudflare wildcard DNS will not have proxy protection from Cloudflare unless you are an enterprise customer. It means now, the IP for all new sites in my multisite network can be exposed, right? Isn’t that dangerous? Isn’t it will expose to DDOS attack? How to protect this IP address?
    2. I enable the domain mapping in the multisite, so people can use their own domain for their site. To map a domain, they need to add CNAME record to my multisite URL or add A record the multisite IP address. Is there a way that I can use alternate or floating IP address, so the real IP of the multisite server will never be exposed?
Viewing 1 replies (of 1 total)
  • 1. Yes, your server IP address is exposed. It is not dangerous but less secure than hiding behind Cloudflare proxy. As you mentioned, you can upgrade your Cloudflare plan for proxy protection. You can do security protection on your server side, such as WAF, rate limiting, etc.

Viewing 1 replies (of 1 total)

The topic ‘Wildcard and IP protection’ is closed to new replies.