IP Masking: Hide Your Server IP

When you self-host Orbitr, your public IP address is visible in DNS records. This guide covers options to hide it.

Option 1: Cloudflare Tunnel (Free)

A popular, free option. A Cloudflare Tunnel routes all traffic through Cloudflare’s network, so your real IP never appears in DNS. You run cloudflared yourself and point a named tunnel at your domain.

• No ports need to be opened on your router
• Works behind firewalls and CGNAT
• Free forever

See the full Public Access guide for Cloudflare Tunnel setup instructions.

Option 2: Pulsar Proxied Mode (Coming Soon)

Option 3: VPS Reverse Proxy

Run a cheap VPS ($3-5/month) as a reverse proxy. Your home server connects to the VPS via a WireGuard or SSH tunnel, and the VPS forwards traffic. Your home IP never appears in DNS.

server {
  listen 443 ssl;
  server_name chat.yourdomain.com;

  ssl_certificate /etc/letsencrypt/live/chat.yourdomain.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/chat.yourdomain.com/privkey.pem;

  location / {
      proxy_pass https://10.0.0.2;  # WireGuard peer IP (port 443 is default)
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-For $remote_addr;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
  }
}

Option 4: Accept It

For private servers shared only with trusted friends, IP exposure may be perfectly acceptable. Your IP reveals your approximate location (city-level) but not your exact address.

Comparison