OQENS is designed to mitigate DDoS and scanner threats by allowing complete concealment of the origin server's IP address. By placing an edge proxy like Cloudflare in front of your storage node, you shield your origin VM from direct internet scanning.
Once origin protection is configured, any client requesting a file download routes through Cloudflare's massive edge network first. This completely obscures the OQENS backend server IP and prevents malicious actors from launching targeted application-layer attacks.
For maximum security, OQENS administrators can configure Nginx to reject all direct connection attempts that do not originate from Cloudflare's known IPv4 and IPv6 IP blocks. This forces all traffic through the proxy layer and closes all backdoors to the backend port.
With Cloudflare proxying active, SSL termination and request rate-limiting are handled at the proxy edge. This reduces the resource footprint on your OQENS server and improves cache performance for frequently requested assets.