Packets source mac and IP carries all the way to the termination point. They do actually get your IP address. This is how they are able to mitigate DDoS's on an individual user level and not wipe out entire blocks of IP's entirely.
True the source mac ends at the router, my bad, it gets changed to the mac of the WAN for the router. But the IP address source does carry all the way through, which is all that is needed.
They cannot see your user name. That is encrypted with SSL. Just because the SSL terminates and is recreated there, does not mean encryption is broken. It simply gets re-encrypted and both keys are passed to the destination. It is not revealed at the termination point. Only the key to decrypt the new encrypted packets.. are revealed... to the destination.
I encourage you to read into Layer 3 routing and packets.
The source IP is your WAN IP always. It carries through. NAT will change your PC's local network IP (192.168.x.x) to your gateway IP in the packet. This identifies YOU. Individually.
No SSL or TSL is needed for that.
DNS forces the traffic to re-route through cloudflare's routers and thus they get the packet data.
This is why everyone should use a VPN.
Suggestions? Should I pay for the one Brave provides?
Is free version sufficient or should I pay for higher speed
ProtonVPN, yea. Ideally you want the one's who take the honor of giving a middle finger to information requests :)
That's not how CloudFlare works.
Just stop.
Then it tracks IPs rather than specific content.
There's literally millions of us and you vastly overestimate how special you or I are.
Yes, we've had people here arrested but they do Boomer-tier glowing.
Packets source mac and IP carries all the way to the termination point. They do actually get your IP address. This is how they are able to mitigate DDoS's on an individual user level and not wipe out entire blocks of IP's entirely.
True the source mac ends at the router, my bad, it gets changed to the mac of the WAN for the router. But the IP address source does carry all the way through, which is all that is needed.
They cannot see your user name. That is encrypted with SSL. Just because the SSL terminates and is recreated there, does not mean encryption is broken. It simply gets re-encrypted and both keys are passed to the destination. It is not revealed at the termination point. Only the key to decrypt the new encrypted packets.. are revealed... to the destination.
I encourage you to read into Layer 3 routing and packets.
The source IP is your WAN IP always. It carries through. NAT will change your PC's local network IP (192.168.x.x) to your gateway IP in the packet. This identifies YOU. Individually.
No SSL or TSL is needed for that.
DNS forces the traffic to re-route through cloudflare's routers and thus they get the packet data.
Matthew Prince isnt as much of a prick as Bezos but who knows.