Security & Anti-DDoS Guide

To fully protect your Synology NAS from DDoS attacks and hide your home IP address, you must use a reverse proxy service like Cloudflare. Frontend code alone cannot hide your server's IP.

Step 1: Create a Cloudflare Account

Go to Cloudflare.com and sign up.
Click Add a Site and enter your domain (e.g., khoavo.i234.me).

Step 2: Update DNS Records

Cloudflare will scan your existing DNS records.
Ensure your A records (pointing to your home IP) are set to Proxied (Orange Cloud icon).
- Orange Cloud: Traffic goes through Cloudflare -> Your NAS. (IP Hidden, DDoS Protected)
- Grey Cloud: Traffic goes directly to your NAS. (IP Exposed, No Protection)

Step 3: Configure SSL/TLS

Go to the SSL/TLS tab in Cloudflare.
Set the mode to Full (Strict) if your NAS has a valid certificate, or Flexible if it doesn't.

Step 4: Firewall Rules (Optional but Recommended)

Go to Security > WAF.
Create a rule to Block traffic from countries you don't expect visitors from.
Enable Bot Fight Mode to block automated attacks.

Why this is necessary?

When you host a website on your NAS, your domain khoavo.i234.me translates directly to your home IP address. Anyone on the internet can see this IP. By using Cloudflare as a "middleman", visitors only see Cloudflare's IP, keeping your home network safe.

1.4 KiB Raw Blame History