Hi,
I have no idea what kind of hosting setup this forum uses. But it is still quite possible that the hosting provider, shared or not, has their own security measures in places as well.
"Also... what's the point of using Cloudflare for "ddos protection" "
Because we can stop a lot of bad http requests. In addition to offering DDoS mitigation, site owners can also do some other things to limit the impacts of an attack (accepting connections from CloudFLare's IPs only by server rules, etc.).
You think this forum runs on shared hosting or something? Also... what's the point of using Cloudflare for "ddos protection" when 99% of the time you can find the real server's IP from an email header (especially on something like a forum)?
I have no idea what kind of hosting setup this forum uses. But it is still quite possible that the hosting provider, shared or not, has their own security measures in places as well.
"Also... what's the point of using Cloudflare for "ddos protection" "
Because we can stop a lot of bad http requests. In addition to offering DDoS mitigation, site owners can also do some other things to limit the impacts of an attack (accepting connections from CloudFLare's IPs only by server rules, etc.).