CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

learn more… | top users | synonyms

0
votes
0answers
13 views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH on Ubuntu

I'm running wordpress on a Digitalocean VPS with cloudflare installed. My ssl was working perfectly till a few days ago when a buch of clients informed me they received the following error when ...
0
votes
0answers
15 views

CloudFlare + Nginx + ngx_http_realip_module

We are currently using ngx_http_realip_module to convert CF ip's back to the users'. It works well for the most part but some ips in our access.log are still from CF. Current config in http {}: ...
1
vote
2answers
224 views

Cloudflare doesn't cache as expected

I'm wondering why Cloulflare would not cache a certain static js file. Given the reuqest: curl -I http://www.testlifeinuk.com/dist/lifeinuk.js the headers returned like: HTTP/1.1 200 OK Date: ...
0
votes
3answers
2k views

Only allowing traffic from Cloudflare

I am new to Linux System Administration and I am experimenting with iptables trying to learn how to really lock down a system with them. And one thing a friend of mine recommended was that there was a ...
1
vote
1answer
103 views

How to log clients' real IPs when using CloudFlare + Nginx + Apache

I've been stuck for days trying to solve this problem, I hope someone can help me with this. I have Nginx stands as a reverse proxy in front of Apache. I'm able to log clients' real IPs by using ...
0
votes
1answer
107 views

Allow only SSH, FTP and Cloudflare Servers via IPTables

I want to allow only SSH access, FTP access and all communications between my Dedicated Server and all Cloudflare Servers using IPTables. I tried the commands beneath but it seems like I kicked out ...
0
votes
1answer
59 views

Why I have set HTTP_X_FORWARDED_PROTO and unset HTTPS on Apache 2.4? [closed]

Recently I updated my website: CMS (Drupal), it's OS (Ubuntu 14.04) and Apache (2.4.7). The situation is that when surfing on https://example.com/whatever PHP can't detect HTTPS. $_SERVER['HTTPS'] is ...
-1
votes
1answer
2k views

Redirect loop using cloudflare's Flexible ssl

I am trying to implement Flexible SSL provided by CloudFlare to my site. Here is my nginx config: # PHP-FPM upstream; change it accordingly to your local config! upstream php-fpm { server ...
0
votes
1answer
60 views

fail2ban keeps trying to ban again

I have an issue getting fail2ban to do what I want. I use a action which bans the IP on CLoudFlare, that means that still a lot of requests get through until everything has been updated on ...
0
votes
2answers
74 views

Reverse DNS error

Today I changed my DNS and nameservers to Cloudflare. After that, pingdom gave some strange DNS errors. I searched the internet but couldn't find a solution. The errors are: Could not find reverse ...
3
votes
1answer
114 views

Unable to allow/deny access to IPs

I have an otherwise happily working server on Ubuntu 14.04. I'm trying to restrict access to a file using an allow/deny block: <Files "login.php"> order deny,allow deny from all allow from ...
0
votes
0answers
78 views

Bad Gateway - NGINX Load Balancer Cloudflare

I have configured an NGINX 'load-balancer' to sit in front of my site. Right now my backend consists of only one server, but I plan to add more to actually utilize the 'load-balancing' of NGINX. If I ...
-1
votes
1answer
63 views

Openshift Wordpress site custom domain name 'www' doesn't work [duplicate]

I use Opemshift to host my Wordpress site. I use a custom domain name for my site. I have also added an alias for www.example.com. I use Cloudflare for DNS and I have created a CNAME record for ...
0
votes
3answers
439 views

Issue varnish purge through CloudFlare to Varnish

I've been working on this for a while and can't seem to find any solution. I have varnish sitting in front of my nginx server, with CloudFlare sitting in front. When I issue a curl -X PURGE host ...
-1
votes
1answer
118 views

Blocking request with query string

I'm an under a DDoS attack though I have cloud flare.. I found out that the attacker is accessing the server using query strings "?a=randomnumber" I don't use query strings in my website so I need ...
1
vote
1answer
500 views

DNS subdomain catch-all linking to my external address

First of all, I'm not that into DNS, so maybe the answer to this question is very obvious, sorry in either way. What I want is this: A DNS record which catches all non-existing subdomains on my site ...
0
votes
0answers
40 views

Delay for CNAME entries on Cloudflare, or any other restriction?

I have a domain like "example.org" at CloudFlare. I have a CDN at Amazon and would like a CNAME subdomain pointing to the CDN host. I have added a CNAME called "documents.public" pointing to the CDN ...
0
votes
0answers
50 views

How to avoid OpenShift sub domains being cached by Google?

I've set up a custom domain with my OpenShift application. (Which is a blog) I've setup CloudFlare with page rules to redirect mydomain.com -> www.mydomain.com Now essentially, I've two aliases for my ...
0
votes
1answer
343 views

Getting a [550 5.1.1 Recipient not found] (Can't receive email) with CloudFlare

I'm having troubles with my email account. I'm using GoDaddy's Email service and the domains that are not connected to CloudFlare are operating just fine. The problem comes in with the domains that I ...
1
vote
1answer
110 views

Handling POST requests from blocked IP's

I have a malicious user targeting my site, sending a large amount of POST requests. I have automated systems to block abusing IP's however the problem is I am blocking them within my PHP code via a ...
0
votes
1answer
40 views

HAProxy loadbalancing wildcards

This is an example of my loadbalancer file for a single DNS entry. acl: - 'is_site_net hdr(host) -i site.net’ use_backend: - 'site_net if is_site.net whitelist_list’ site_net: options: ...
0
votes
1answer
24 views

Inbound IPTables rules based on queried domain

I have an odd situation and I'm not entirely sure if it is even possible in IPTables. If it isn't, that's fine and I can do without. If it is, fantastic, I'd love to see how to implement it. So, my ...
1
vote
2answers
355 views

HTTPS access to S3 bucket through Cloudflare

I'm trying to use Cloudflare to provide https access to an s3 bucket. I've setup the CNAME entry in Cloudfront with pointing to the bucket and I've verified I can access it via http but when I try and ...
-1
votes
1answer
40 views

Un-Noticed Vulnerability, I need to know if i should do anything

Possible Web-Site Vulnerability. I'm not sure if this is the right place to ask this, but I am running my own website, that is still currently being developed, but since it is 'Open as Beta' it is ...
-1
votes
1answer
74 views

Can I redirect to other subdirectory of another site with CloudFlare [closed]

I use CloudFlare as DNS and want to point one of my site say productA.com to my main site my-main-site.com/productA. Is this possible with CloudFlare?
0
votes
1answer
192 views

Email configuration - DigitalOcean, CloudFlare, Postfix

I have a website (safirasaloes.com.br) hosted at DigitalOcean and DNS set at CloudFlare. I'm trying to receive e-mails at contato@safirasaloes.com.br with Postfix but I can't. The big problem here is ...
1
vote
1answer
131 views

SSL VirtualHost not using DocumentRoot

I'm trying to set up a self-signed SSL certificate between my own VPS and Cloudflare (next to Full SSL). I'm using the following VirtualHosts for this: <VirtualHost *:80> ServerName ...
1
vote
3answers
171 views

Does CloudFlare make a site a greater potential DDOS target?

CloudFlare has gotten a lot of press recently as protecting businesses from DDOS attacks. But from looking at their twitter feed, it looks like they are targeted every day, and large segments of their ...
5
votes
1answer
540 views

Does cloudflare know the decrypted content when using a https connection?

CloudFlare provides ssl support. However, if a visitor visits a website protected by CloudFlare, is CloudFlare able to know the plain data transfered during this visit? There are a few SSL options: ...
0
votes
2answers
510 views

Wordpress feed does not update after APC and Cloudflare

I am running a Wordpress site on a Ubuntu server. I installed APC and setup Cloudflare. After that I started having a strange problem with the feed. When I check the feed on the browser, I can see ...
0
votes
1answer
131 views

Nginx ip_hash behind proxy (Cloudflare)

We use nginx for our load balancing, and we need ip_hash to guarantee our server work fine. When we started using cloudflare, most our requests go for one server as it seems all of them are ...
0
votes
1answer
176 views

HaProxy + CloudFlare

I am trying to setup HaProxy with DDoS protection rules (rate limiting). However, I think HaProxy is now rate limiting CloudFlare IPs instead of Visitor/Real IPs. (note: my site itself is fine, ...
1
vote
0answers
387 views

Set $REMOTE_ADDR to real client IP

I am hosting a WordPress site on Heroku with Nginx. DNS is behind CloudFlare. My WordPress plugins reports Heroku IPs instead of real client IPs. I have the following Nginx rules: location / { ...
0
votes
0answers
134 views

Infinite 301 redirect loop on some images with apache mod pagespeed

I just installed mod-pagespeed on my Ubuntu server and I have some images which are not visible when I activate mod-pagespeed. When I looked at these images in the Chrome developper tool I see a 301 ...
0
votes
1answer
73 views

Allowing outgoing connections to a particular IP with ufw

I have disabled outgoing connections as a whole with UFW seeing that I didn't want to take chances with my vBulletin forum exposing my server's IP address to attackers (I use CloudFlare). As I've ...
1
vote
2answers
2k views

Using cloudflare as the only load balancer

Say I have 3 vps nodes in linode to serve traffic on a single website. Linode themselves provides a node balancing solution: https://www.linode.com/nodebalancers But I use cloudflare and was ...
1
vote
1answer
396 views

High # of sockets in TIME-WAIT state, server unresponsive at load

Our app became unresponsive at high loads, with longer wait times. Process usage was abnormally low (~15% CPU utilisation per process, our app runs on 8 processes). Nginx error log output showed a ...
0
votes
3answers
888 views

Is it sensible to use both pagespeed and cloudflare?

We're using google's pagespeed service. From what I can gather it just draws the page from our webserver and runs it through the mod_pagespeed optimisation module. I'm wondering does it do any ...
0
votes
0answers
28 views

Site functionality diminished over VPN/company network

We currently experience a diminished with one of our customers at our main production site. All subpages and resources seem to be affected as well. The customer reports a completely broken ...
0
votes
1answer
761 views

How to make a domain receiving email behind cloudflare?

I have a web server hosting multiple domains (centos + postfix + dovcot), one of my domain its dns is hosted on cloudflare (ie. abcd.com), but when I use gmail to send email to a user@abcd.com, ...
-3
votes
1answer
1k views

How to add reverse dns record on cloudflare [closed]

I need to set PTR record on my cloudflare account, because all outgoing mails are going to spam. I do not see ptr record in my cloudflare account. Can I use txt/srv record instead?
0
votes
1answer
149 views

How to debug nginx + php-fpm download failures?

Downloads fail after all data downloaded on nginx + php-fpm. I'm controlling downloads of zip files (roughly 100mb each) with a PHP script that streams the file directly to the client. I'm using ...
0
votes
3answers
719 views

How To go fully IPv6 with Cloud Flare, a web server with both ipv4 and ipv6?

I have setup an Nginx server in a machine which have both ipv4 and ipv6 addresses. Currently, its connected to CloudFlare and only use ipv4. I have 1 ipv4 address assigned to the web server. Now what ...
1
vote
1answer
613 views

How do I deny all requests not from cloudflare?

I've recently gotten denial of service attacks from multiple proxy ips, so I installed cloudflare to prevent this. Then I started noticing that they're bypassing cloudflare by connecting directly to ...
0
votes
1answer
174 views

Cloudflare secondary name server timeout

I recently switched over to Cloudflare and some people have problem sending mail. I've checked and double checked my DNS settings and they look right. However, I have found that querying the secondary ...
0
votes
2answers
772 views

Https url appended with port 80 using CloudFlare, Nginx, and Thin

I have a Nginx setup for my Thin server running a Ruby on Rails project. Nginx is currently the endpoint for my SSL. I recently had some issues with attacks on my webserver, so I decided to add ...
0
votes
2answers
242 views

Having trouble removing HTTP header “Cache-control”

I'm trying to get my assets cached using Cloudflare Cloudflare states here that "CloudFlare will not cache your site or static content if you have no-cache and private headers coming from your ...
0
votes
2answers
182 views

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) ...
0
votes
0answers
74 views

exact same nginx + uwsgi settings, but after getting SSL for my domain, can't connect to flask

im using the exact same nginx + uwsgi settings, but after getting SSL for my domain, I cannot connect to the flask app. what could have gone wrong? There's nothing in the error.log, although the ...
1
vote
1answer
188 views

Slow loading PHP script makes Cloudflare block connections

I use php-fpm and nginx, I am running a slow script but it's blocking all Cloudflare connections, most likely it's a php-fpm issue but I can't find anything via Google. If I run the php script ...