this post was submitted on 23 Sep 2025
51 points (98.1% liked)

Selfhosted

51863 readers
732 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

The Wikipedia article says Cloudflare has been used to host hate speech, websites with illegal content and forums connected to all sorts of illegal activities. And I see them being used by a lot of decent webservices but shady ones as well.

So my question, can Cloudflare be used for something alike "bulletproof hosting"? Does anyone know if they collaborate with law enforcement or care once someone sends a mail to the abuse contact? Or if there's a way to find information about a Cloudflare protected server for the public?

Hypothetical question, I'm just curious and I thought maybe someone here has first-hand experience with getting their account terminated or reporting content or doing piracy via them or whatever...

you are viewing a single comment's thread
view the rest of the comments
[–] Typewar@infosec.pub 4 points 6 days ago* (last edited 6 days ago)

Cloudflare takes a neutral response in general but are not resistant to law enforcement demands.

What you can do is to create a cloudflare account on Tor, buy a privacy-focused VPN that supports port forwarding, connect your server to the VPN and point the DNS record to the VPN ip address. And then create a port rewrite rule in cloudflare settings (because port forwarding supported VPNs rarely support lower than 1024 ports). Atleast in this case, law enforcement notices won't be forwarded to your ISP.. still not bulletproof, but good enough for most stuff if you have concerns.