CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

learn more… | top users | synonyms

0
votes
3answers
22 views

Nginx SSL config returns too many redirects, but regular http version is fine

I have recently tried to add SSL termination to my NGINX server configuration. The regular http reverse proxy/load balance version is working fine. Unfortunately, the current config is returning "too ...
0
votes
1answer
13 views

Webmin through apache2 SSL Proxy

I'm trying to make accessible my Webmin through a sub-domain https://webmin.example.com/ I'm using Cloudflare DNS and Cloudflare SSL Certification. Whenever i type the above URL, it's automatically ...
0
votes
1answer
16 views

Nginx 'listen:port' directive, Cloudflare, and SSL

I have two websites on a server, each with their own vhost file in Nginx. Both are also on Cloudflare, and both have SSL certificates that I've got via Let's Encrypt. Both sites' vhosts files are ...
0
votes
1answer
33 views

Switch back from Cloudflare SSL - 301 Back to http?

I need to know how put a 301 Redirect in my htaccess which points https back to http. Can you help? I see plenty of posts for going from http to https, but not in reverse! I am switching back from ...
1
vote
1answer
33 views

Cloudflare's Websocket Performance while “Proxying”

After finding out that cloudfare now supports Websockets. While browsing their documentation, finding this quote is worrying: No additional configuration is required to send WebSockets traffic ...
0
votes
1answer
40 views

Impossible to serve WebP images using CloudFlare?

I want to optimize some images on my site using WebP format. Webp images are highly compressed jpegs and pngs with the help of algorithm developed in Google. However, webp images can be displayed ...
-2
votes
0answers
15 views

Getting 522 coonection timeout error [closed]

For your reference, i have tried almost everything Restored the database backup Removed plugins removed https and CloudFlare too but currently I have installed them again cause the issue is still ...
0
votes
1answer
49 views

HTTPS throws CloudFlare Error 524

I have a website running off of Apache. Standard HTTP works, but HTTPS does not. HTTPS causes my site to hang, and then eventually throw Error 524. I've looked all over for answers, but couldn't find ...
0
votes
2answers
35 views

Disable Cloudlfare SSL on nginx to use certificate

I use Nginx to host a wordpress site which is configured to use exclusively SSL. A while ago, I activated the Strict SSL option and the HSTS option from Cloudflare. Now I want to disable it and only ...
-2
votes
4answers
72 views

SPF, CloudFlare, Google Apps - Email sent through Contact Form marked as spam

One of the main reasons of putting your server behind CloudFlare is to hide your server's IP address so an attacker can't DDoS your IP and render CloudFlare obsolete. By putting your server behind ...
1
vote
1answer
132 views

Cloudflare SSL - CACert cert file?

I have decided to generate SSL for IIS. I have own CSR and private key. The SSL generated by CloudFlare is in pcks7 format. I would like to to combine it into one pfx formate in order to import it in ...
1
vote
0answers
21 views

How works the NS record definition in DNS section at CloudFlare? [duplicate]

In domain configuration at CloudFlare, the DNS section stores the record definitions. What is the exact purpose of NS record here? If configured, it shows something like: Type | Name | Value ...
1
vote
1answer
32 views

Wildcard Subdomains and Custom Domain Names

I have some questions regarding Nginx configuration with wildcard subdomains, and then how custom domains come into the picture. Here is my situation. Let's say I own the site awesome.com. When a ...
0
votes
1answer
40 views

How to find CNAME or A details for a site hosted at 1&1 and using CloudFlare name servers?

I own a domain at 1&1, and recently switched to CloudFlare CDN. I have some subdomains hosted at the minimal web space provided by 1&1. 1&1 domains and subdomains are configured to use ...
0
votes
1answer
43 views

Can I use Cloudflare CDN/HTTP proxy for SSL-enabled web-site?

I want to use Cloudflare CDN/HTTP proxy for my web-site that already has HTTPS through LetsEncrypt certificate. I don't want to use Cloudflare's Free SSL certificate as it doesn't work on WindowsXP ...
0
votes
1answer
55 views

How to store Cloudflare IP as an additional FastCGI parameter in Nginx? [duplicate]

I need to be able to know the Cloudflare IP for connections made to my server. This is so I can determine if a connection is made through Tor. To do that, I need to send the tool the IP that the ...
1
vote
0answers
28 views

CloudFlare - Show captcha to everyone, except country

I wonder whether it is possible in CloudFlare's IP firewall to challenge everyone with a captcha, except 2-3 countries. Tried on my own and searched the web but did not find how.
0
votes
0answers
83 views

too many redirects when using SSL

Im having an issue with https redirects. Ive tested in chrome, firefox and safari. When i load my website using https i get the errors Firefox: "The page isn't redirecting properly" Chrome: "...
0
votes
1answer
42 views

Does OCSP stapling increase performance for websites behind CloudFlare?

Should a website trying to increase performance that uses the CloudFlare CDN (or any CDN really) who already do OCSP stapling configure OCSP stapling on their instance of Nginx if "Full SSL" setting ...
0
votes
2answers
65 views

Can I use the same SSL certificate on the CDN and the origin

It's pretty straightforward question, I have a certificate issued by DigiCert, already installed it on my origin, and I want to use it for the CDN. I'm starting to configure Akamai CDN in front of my ...
0
votes
1answer
44 views

Is it normal to have HTTP 499 errors in 1 out of 4000 requests?

I made a website, behind CloudFlare, and sometimes I get an early terminated (nginx 499) request, which is really hard to work around in the codebase. This happens in about 1 out of 4000 requests. ...
0
votes
2answers
118 views

The incompatibility between Cloudflare and the reverse DNS

I'm already activated Cloudflare for my website and to apply that I had to replace my domain default nameservers with Cloudflare nameservers. Now my website has to send emails to the mail servers, but ...
-2
votes
1answer
44 views

Creating DNS CNAME or MX aliases

How can I create a CNAME or an MX record alias, for example, I need smtp.mydomain.com to resolve to smtp.yandex.com so that on my email client I should enter smtp.mydomain.com instead of smtp.yandex....
0
votes
0answers
100 views

Whitelist or disable rate limit of CloudFlare IPs for AWS EC2

I have two AWS EC2 instance in Sydney, serving sites sitting behind CloudFlare. I'm not using ELB. Over the last week I have started seeing CloudFlare serving 522 Timeout errors fairly regularly. ...
0
votes
1answer
138 views

rDNS / PTR record when using Cloudflare

I know that Cloudflare, does not support mail trafic and uses dynamic IP's to protect the servers behind it, But I really need to be able to do rDNS lookups on my IP. I have turned of the Caching and ...
0
votes
0answers
89 views

nginx req limit & fail2ban & cloudflare large attacks

I started to use as the topic says nginx with req limit + fail2ban + cloudflare. If someone exceeds the requests on any php file the ip gets blocked over the cloudflare api in the "ip firewall" on ...
-4
votes
2answers
51 views

Config to allow SQL Server to be connected through CloudFlare?

I have already known the risk of exposing SQL Server database on the Internet, but please look at my situation: I have two instances of SQL Server: production (default instance SQLEXPRESS) and dev (...
0
votes
1answer
90 views

Authenticated Origin Pulls with CloudFlare and IIS

I'm running Windows Server 2012 R2 with CloudFlare in front and trying to setup authenticated origin pulls as specified here - https://support.cloudflare.com/hc/en-us/articles/204899617 The problem ...
0
votes
1answer
94 views

Can I use hosts.allow hosts.deny files to restrict access to my websites (Nginx)?

Is there any way how to use hosts.allow and hosts.deny files to restrict access to the websites (Nginx)? This does not work: hosts.allow file content: nginx: SOME-IP-ADDRESS hosts.deny file content:...
0
votes
1answer
114 views

cloudflare + nginx with limit_req and limit_conn

For the sake of simplicity, let's say I have a web server running nginx serving a single php file (with a "hello world" message) via php5-fpm. Let's say that the server is behind cloudflare and that ...
0
votes
1answer
62 views

how to fix “Invalid command 'set_real_ip_from'” error?

I'm using centos 6 , nginx as reverse proxy,directadmin and cloudflare. I followed the instructions to get real visitors IP as below: $ nano /etc/nginx/nginx.conf added these to http{ ...
2
votes
1answer
108 views

Too many redirects

I have an app on Heroku which I would like to point to with two different URLs. I use CloudFlare as my name server. My first domain has 8 records; 2 CNAME, 6 MX and one TXT. It looks like so: CNAME &...
-2
votes
1answer
65 views

Is this a DDoS attack? It's been overr 48 hours. What do I do? [closed]

I run a Wordpress on EC2 at AWS and I am facing the following issue: More than 2 days ago, the CPU went straight to 100% and the load balance up to ~20+ (for a 4-vcpu server) out of the blue. Being ...
0
votes
1answer
152 views

nginx GEOIP behind cloudflare proxy showing wrong country (not of end user, but if proxy)

I am using Cloudflare and nginx geoip directives: geoip_country /usr/local/share/GeoIP/GeoIP.dat; geoip_city /usr/local/share/GeoIP/GeoLiteCity.dat; They are picking the IP up OK (as pipaddress ...
1
vote
0answers
45 views

Large RSS feed requests to non-existent URL causing 404 (and high load)

Recently I had a new site launced completly replacing a previous site. We have cloudflare in front and switched the host-name to the new site IP. Instantly we saw load go above 200+ and a constant ...
1
vote
0answers
32 views

Cannot change Nameservers to cloudflare

I have a domain but I can't change its nameservers to point Cloudflare's. I've been told that the NIC is rejecting them (it's a ccTLD), literally "your nameservers are not authoritative for that ...
0
votes
1answer
88 views

Reverse proxying a Websocket upstream with Cloudflare

I was going to ask on the main SO boards, but figured this place would be more appropriate. I am wanting to use cloudflare on my main website and then use nginx to reverse proxy a directory to my ...
-1
votes
1answer
73 views

404 header error instead of the correct 200

I have just updated a (dynamic) website by sftp/ssh and all the new pages have been considered as 404 error not found. Actually, all the pages, including the old pages which was overwritten. Also, ...
1
vote
0answers
43 views

CloudFlare not caching vBulletin php page serving image content

I have signed up with CloudFlare and while it seems to work for some pages I cannot get a rule to work correctly with php pages serving images. The page in question is: http://www.landcruiserclub.net/...
0
votes
0answers
23 views

Website Guests Viewing

I'm not sure if this is the right place to ask but recently on my website, it is being taken down by "guests" as in all of a sudden I will have 13,000 guests on my website. Cloudflare nor OVH detects ...
0
votes
0answers
50 views

Why does Cloudflare DNS always resolve to the same edge servers?

Cloudflare has servers all around the globe, yet it always returns the same set of servers for a website regardless of the requester's location. For example I've run dig for curse.com (which uses ...
0
votes
2answers
191 views

CloudFlare giving error 522 without HTTPS

I've set up Let's Encrypt (with nginx) on my server, following the tutorial I've linked in the comments. I've also set up CloudFlare with the following DNS settings: http://i.imgur.com/Z7PRD6l.png ...
0
votes
1answer
31 views

Pointing client's domain to our subdomain

We have a web application online www.exampleapp.com/ running on IIS 7.5 that we have a full control of. We also provide customised (css, images, js, etc.) versions for some customers under subdomains ...
0
votes
2answers
57 views

Does CloudFlare cache MaxCDN resources?

I'm utilizing both CloudFlare and MaxCDN for my website; MaxCDN handles images and scripts while CloudFlare handles HTML pages (in terms of CDN). I'm not using a custom subdomain for MaxCDN (i.e. I'm ...
0
votes
1answer
381 views

How to mitigate DDOS attacks on AWS?

I have web application (NodeJS) and I plan to deploy it to AWS. To minimize the cost it will run on single EC2 instance. I'm worried though about what will happen if someone decides to bless me with ...
2
votes
1answer
101 views

Redirect www to naked domain using CloudFlare

I would like all my requests to www.example.com to be redirect to example.com, in order to ease anaylitics and for marketing reasons. I could not find out how to this this with CloudFlare (I was used ...
0
votes
1answer
13 views

Log access to cached content by 3rd party

The question is pretty much the same as this one: How to log a request to apache access log if it's cached by Varnish but instead of varnish let's say I am using CloudFlare. Is there any way to ...
1
vote
1answer
74 views

Do I have to have the IP address of a server to initiate a DMCA takedown if the server is behind a service like Cloudflare?

We have some content that is, well, "contested". The site that is misusing our content is being hosted by Cloudflare. I'm concerned that I will need to know the IP address of the server hosting the ...
0
votes
0answers
36 views

Domain forwarding without running a server with CloudFlare

CloudFlare has a great option in PageRules to set up URL forwarding. I can set it to *.example.com/* to redirect everything to a different domain. My problem is that while this works perfectly, this ...
0
votes
2answers
267 views

How do I find the cause of http to https redirect loop?

I setup owncloud on a new box recently (Apache/2.4.10 Debian). This was before I got an ssl cert through Let's Encrypt. I've been trying to force http to https, but I always end up with redirect loops....