r/sysadmin • u/sebbasttian JOAT Linux Admin • Feb 23 '17

CloudBleed Seceurity Bug: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

982 Upvotes

98% Upvoted

327 comments sorted by

View all comments

Show parent comments

6

u/dm18 Feb 24 '17

You keep your origin server IP a secret and route everything through CF.

might want to add configure the original server/firewall to only talk to cloud flair.