Proxy a websocket to hide the IP <p>I have a sub domain routed through cloudflare. They don't cover websockets unless it enterprise or maybe business depending on traffic.</p> <p>So now when users visit the external site, it connects to my sub domain via a websocket with the url of my site being passed in their url.</p> <pre><code>e.g thridpartysite.com?ws=my.subdomain.com </code></pre> <p>But my IP is revealed and I am worried about DDoS. </p> <p>I am using nginx and ubuntu 14.04. Is there anything I can do to mask the IP? </p> <p>Here is my current nginx config</p> <pre><code># Config server { listen 80; listen [::]:80; server_name my.subdomain.com www.my.subdomain.com; location / { proxy_pass http://MySubdomainIP:443; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_set_header Host $host; proxy_cache_bypass $http_upgrade; } } </code></pre> <p>So it takes the app on 443 and proxies to 80 so I can route that through cloudflare but no websocket support means I need to reveal my IP which leaves me open to DDoS attacks.</p> <p>Is there anything I can do at this point?</p>