IP Masking — Hide Your Server IP

When you self-host OrOrbit, your public IP address is visible in DNS records. This guide covers options to hide it.

Option 1: Cloudflare Tunnel (Free)

The easiest and most popular option. A Cloudflare Tunnel routes all traffic through Cloudflare’s network, so your real IP never appears in DNS.

• No ports need to be opened on your router
• Works behind firewalls and CGNAT
• Free forever

See the full Public Access guide for Cloudflare Tunnel setup instructions.

Option 2: Pulsar Proxied Mode (Paid)

If your server is registered with Pulsar, you can upgrade to a proxied connection. Cloudflare proxies all traffic to your server, hiding your origin IP behind Cloudflare’s network.

• Requires Pulsar+ or Pulsar Pro subscription
• Enable in Admin Panel → Network → Pulsar → Proxied Mode
• No additional software or configuration needed

Option 3: VPS Reverse Proxy

Run a cheap VPS ($3-5/month) as a reverse proxy. Your home server connects to the VPS via a WireGuard or SSH tunnel, and the VPS forwards traffic. Your home IP never appears in DNS.

server {
  listen 443 ssl;
  server_name chat.yourdomain.com;

  ssl_certificate /etc/letsencrypt/live/chat.yourdomain.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/chat.yourdomain.com/privkey.pem;

  location / {
      proxy_pass https://10.0.0.2;  # WireGuard peer IP (port 443 is default)
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-For $remote_addr;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
  }
}

Option 4: Accept It

For private servers shared only with trusted friends, IP exposure may be perfectly acceptable. Your IP reveals your approximate location (city-level) but not your exact address.

Comparison