How is real ip protected from ddos ​​attacks?

Question

DDoS Protection

What topic to look for in order to understand?
There is a site toster.ru -> dns records on cloudflare -> and already there the real ip of the server is specified in the settings.
In fact, can you trace the real ip of the server and attack it already?
Help me figure it out, because I can not understand what to google.

Answer 1

The first task of an anti-ddos provider is to hide the client's real IP.
With cloudflare, you won’t find out the IP in any way (well, you can only break the account).
They hide (and generally receive traffic) - in different ways. Someone does l7 proxying, someone does ipip tunnels.
But the idea is right - if you find out the real IP of the server with the site, you can safely DDoS it directly. You can find out this address, for example, from the letters that the server sends.

Answer 2

Search youtube Qrator/Lyamin/Gavrichenkov ;)

Answer 3

In fact, can you trace the real ip of the server and attack it already?

will not work. Cloudflare is a CDN proxy. The IP will show up on cloudflare and won't go any further.