Bypass Cloudflare protection using DMCA
It seems there is a rather easy method of finding the ip address of any service behind Cloudlfare, send them a DMCA notice and they will happily hand over ip address to "complainer" who then can proceed with their DDOS
This has happened 3 times now to me, this time i was prepared the ip Cloudflare handed over (and only Cloudflare could have known about) was a vps re-routing http traffic to my real server via haproxy.
edit: Cloudflare did not forward the email to me, instead they sent it to OVH the host of the haproxy vps, the DMCA was a dud, for files uploaded by the attacker themselves!
Can you reach out to me privately so that I can take a look at this?