Visitors reach Shield first. Shield checks them, then forwards the real ones to your server. This page covers the one step where you give Shield your server's public address. You have already added your domain and proved you own it.
Back to Set up Shield, the full setup from the first step.
Not sure? Try it. Shield checks the address and, if it cannot reach your server, the dashboard offers the Shield Tunnel right there.
Shield now serves your visitors. You can lock your server so only Shield can reach it, the Security tab shows a copy-paste snippet, tune protection, or add another site anytime.