Questions tagged [cloudflare]

CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

Filter by
Sorted by
Tagged with
18 votes
5 answers
34k views

Access my server through SSH with the domain (with Cloudflare)

I have this server (44.44.44.44, for instance) running a webserver. I have routed pollnote.com to the server to access my webserver. Everything works fine. To access the server, I added my Public Key ...
Enrique Moreno Tent's user avatar
15 votes
1 answer
5k views

Does cloudflare know the decrypted content when using a https connection?

CloudFlare provides ssl support. However, if a visitor visits a website protected by CloudFlare, is CloudFlare able to know the plain data transfered during this visit? There are a few SSL options: ...
xuhdev's user avatar
  • 940
14 votes
1 answer
4k views

Why does my Let's Encrypt certificate contain references to Cloudflare?

I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it. Now, I set up an apache2 webserver and used certbot to ...
lolc's user avatar
  • 153
14 votes
6 answers
10k views

Using namecheap dns with cloudflare

Since CloudFlare doesn't provide E-mail forwarding I need to leave my DNS management on Namecheap. What DNS records (A,CNAME,...) would I need to point to CloudFlare (and to where) to be able to ...
Onitlikesonic's user avatar
13 votes
3 answers
4k views

How to make Google Cloud Load Balancer respect the received X-Forwarded-Proto?

My app structure uses GKE and CloudFlare. It looks like this: CloudFlare -> GKE -> Ingress -> My app running nginx I'm using the flexible SSL in CloudFlare, so only the connection between ...
Vítor Baptista's user avatar
12 votes
1 answer
15k views

Adding CloudFlare to S3 bucket

I have an Amazon S3 bucket that contains thousands of JPGs and similar media assets. (It's the storage for my forums.) I don't host a static site in this bucket (no HTML of any kind) and it's ...
Eric's user avatar
  • 1,127
10 votes
2 answers
16k views

Using CloudFlare as the only load balancer

Say I have 3 VPS nodes with Linode to serve traffic on a single website. Linode themselves provide a node balancing solution. But I use CloudFlare and was wondering after I read their blog article on ...
Masum's user avatar
  • 228
9 votes
3 answers
22k views

Redirect loop using cloudflare's Flexible ssl

I am trying to implement Flexible SSL provided by CloudFlare to my site. Here is my nginx config: # PHP-FPM upstream; change it accordingly to your local config! upstream php-fpm { server 127.0....
Deqq's user avatar
  • 141
9 votes
5 answers
29k views

How do I deny all requests not from cloudflare?

I've recently gotten denial of service attacks from multiple proxy ips, so I installed cloudflare to prevent this. Then I started noticing that they're bypassing cloudflare by connecting directly to ...
phillips1012's user avatar
9 votes
4 answers
12k views

Cloudflare not caching static files as expected (cf-cache-status: MISS)

I'm wondering why Cloulflare would not cache a certain static js file. Given the reuqest: curl -I http://www.testlifeinuk.com/dist/lifeinuk.js the headers returned like: HTTP/1.1 200 OK Date: Mon, ...
Wudong's user avatar
  • 201
9 votes
1 answer
863 views

Is it possible to avoid costs for invalid requests at AWS S3 or cloudfront during a DDoS attack?

There are many tutorials in the internet, that promote cheap hosting of static websites via AWS S3 + AWS Cloudfront (+ Cloudflare). Example of these would be: Host a website using S3, CloudFront and ...
user1861174's user avatar
9 votes
2 answers
9k views

Setting up CloudFlare with Route 53?

I'm trying to get CloudFlare to sit in front of Route 53. I have my main web server on an ELB (which doesn't have an IP address). CloudFlare needs an IP for an A record, so how can I accomplish this?
Shamoon's user avatar
  • 901
8 votes
5 answers
10k views

Using dd-wrt Dynamic DNS client with CloudFlare

I'm trying to configure Dynamic DNS client on my router with dd-wrt (v24-sp2) firmware so it would dynamically change IP address in one of the DNS records. Unfortunately I encountered a problem… Here ...
Roman's user avatar
  • 190
8 votes
1 answer
15k views

How to bypass cloudflare caching like reddit does

Someone knows how reddit manages to bypass cloudflare static html caching once the user logs in successfully with a reload of page? I see that the current page gets reloaded after a successful login. ...
jithujose's user avatar
  • 241
8 votes
1 answer
1k views

Amazon S3 appears to be blocking cloudflare IP addresses. How do I fix it?

I have static content that is being served by Cloudflare. Cloudflare points to Amazon S3 to pick up the static content and serves it via a CNAME (cdn.mydomain.com). The bucket is setup properly and ...
JStark's user avatar
  • 181
7 votes
3 answers
2k views

Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail

Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail. When I "View Original Message" in GMail, I see... SPF: NEUTRAL with ...
clayRay's user avatar
  • 181
6 votes
1 answer
12k views

Cloudflare + AWS route 53 combined to handle records

I bought my domain from Godaddy, I use cloudflare for most of my services, so i added the nameserver to my godaddy domain configuration. So lets say I have api.mydomain.com firmware.mydomain.com ...
John's user avatar
  • 301
6 votes
3 answers
5k views

Domain Ownership error. No CNAME records were found. Please add a CNAME record pointing to myapp.azurewebsites.net

I am trying to set up the urls https://www.mywebsite.net.au and https://mywebsite.net.au to work for my Azure App Service using with Cloudflare. Where mywebsite represents my web site name. ...
Kirsten's user avatar
  • 185
6 votes
3 answers
32k views

Allowing outgoing connections to a particular IP with ufw

I have disabled outgoing connections as a whole with UFW seeing that I didn't want to take chances with my vBulletin forum exposing my server's IP address to attackers (I use CloudFlare). As I've ...
Lorenc's user avatar
  • 117
6 votes
2 answers
7k views

Hide subdomains from scan tools

How can I hide the subdomains list from scan tools like dnsdumpster? I have some subdomains, where I keep dev versions of my projects. I need to be sure that nobody can know about subdomains.
Kandrat's user avatar
  • 195
6 votes
2 answers
5k views

Redirect www to naked domain using CloudFlare

I would like all my requests to www.example.com to be redirect to example.com, in order to ease anaylitics and for marketing reasons. I could not find out how to this this with CloudFlare (I was used ...
rbaprado's user avatar
  • 131
6 votes
1 answer
18k views

Is it normal to have HTTP 499 errors in 1 out of 4000 requests?

I made a website, behind CloudFlare, and sometimes I get an early terminated (nginx 499) request, which is really hard to work around in the codebase. This happens in about 1 out of 4000 requests. ...
hyperknot's user avatar
  • 721
6 votes
1 answer
4k views

How secure is CloudFlare's basic SSL

CloudFlare's basic SSL package provides SSL encryption for you site, but only between your customer's browser, and the CloudFlare server where SSL is terminated. The connection between CloudFlare and ...
mrwooster's user avatar
  • 243
6 votes
3 answers
13k views

Is it possible for CloudFlare to get content from 8080 and serve it on 80?

Is it possible for CloudFlare to get content my server provides over port 8080 and serve it on port 80 to users? For instance, I have the following IP address 0.0.0.0 and domain example.ga (...
Theo's user avatar
  • 71
5 votes
2 answers
5k views

Registered domain using Route 53, using Cloudflare for DNS, having problems configuring DNS correctly

I've been trying to configure a Github Pages + Universal SSL from Cloudflare setup, unfortunately while the Jekyll/Github Pages part is going well, DNS configuration is not going as well. I've bought ...
oblio's user avatar
  • 385
5 votes
2 answers
3k views

Nginx ip_hash behind proxy (Cloudflare)

We use nginx for our load balancing, and we need ip_hash to guarantee our server work fine. When we started using cloudflare, most our requests go for one server as it seems all of them are ...
digao_mb's user avatar
  • 165
5 votes
2 answers
7k views

How do I setup a CloudFlare Origin Certificate in AWS Certificate Manager?

When I try to import the Origin Certificate that CloudFlare provides into AWS Certificate Manager so I can use it with an ELB, ALB or NLB I find that it requires a key chain certificate that they didn'...
flickerfly's user avatar
  • 2,793
5 votes
2 answers
3k views

Cloudflare and .DE domain

It's been a week since I'm having trouble with switching my .DE domain to work through Cloudflare. After registering at Cloudflare I got two dns servers gail.ns.cloudflare.com mark.ns.cloudflare.com ...
sr9yar's user avatar
  • 153
4 votes
4 answers
3k views

Terminating SSL at Cloudflare level. Do I get performance gains?

I saw in a post that terminating SSL at Cloudflare level and HTTP only traffic from Cloudflare to origin gives a performance boost since SSL is negotiated only at the edge. I run a website (mostly ...
Quintin Par's user avatar
  • 4,443
4 votes
1 answer
9k views

How to make a domain receiving email behind cloudflare?

I have a web server hosting multiple domains (centos + postfix + dovcot), one of my domain its dns is hosted on cloudflare (ie. abcd.com), but when I use gmail to send email to a [email protected], user@...
hkguile's user avatar
  • 398
4 votes
4 answers
4k views

Statically mirroring a heavy trafficked site, CloudFlare as DNS

I run a fairly heavy trafficked website and due to some unfortunate incidents the machines that are in my cloud at Linode went down. And I have only a single Load Balancer machine exposed to the ...
Quintin Par's user avatar
  • 4,443
4 votes
2 answers
3k views

Cloudflare integration with Azure websites

On cloudflare, I have given below details for example.com A record pointing to Azure IP www CNAME record to example.azurewebsites.net Cloudflare routing is working for example.com and www.example....
Faiz Mohamed Haneef's user avatar
4 votes
1 answer
1k views

Unable to allow/deny access to IPs

I have an otherwise happily working server on Ubuntu 14.04. I'm trying to restrict access to a file using an allow/deny block: <Files "login.php"> order deny,allow deny from all allow from 22....
jontly's user avatar
  • 119
4 votes
3 answers
3k views

Is it sensible to use both pagespeed and cloudflare?

We're using google's pagespeed service. From what I can gather it just draws the page from our webserver and runs it through the mod_pagespeed optimisation module. I'm wondering does it do any proxy/...
John Mee's user avatar
  • 2,678
4 votes
1 answer
6k views

is cloudflare now using let's encrypt certificates for edge?

i just added a new domain to cloudflare and the edge certificate is let's encrypt r3, shown in control panel and by inspecting in browser when on the domain's website. my existing domains still have ...
rvh's user avatar
  • 109
4 votes
3 answers
4k views

Putting google cloud platform (cloud run) behind cloud flare

I have an app in google cloud run. I have connected my domain and added the cname: ghs.googlehosted.com. my DNS and domain service is in cloud flare. If the SSL is Full or Full strict I am getting ...
fatNjazzy's user avatar
4 votes
2 answers
750 views

How does Cloudflare know about my Subdomains?

I just signed up Cloudfare and they showed me a list of my subdomains by scanning my domain. How do they do this? What technology is used to scan all subdomains related to a root domain?
Isabella Wilcox's user avatar
4 votes
1 answer
7k views

How to add reverse dns record on cloudflare [closed]

I need to set PTR record on my cloudflare account, because all outgoing mails are going to spam. I do not see ptr record in my cloudflare account. Can I use txt/srv record instead?
Anom's user avatar
  • 111
4 votes
1 answer
6k views

Cloudflare, reverse DNS and php mail ending up in spam folder

I've been using Cloudflare to host my DNS, and PHPMailer to send e-mail through ZOHOs SMTP servers with great success, but have found that all my e-mails are hitting Gmail, Zoho and Hotmails spam ...
Joseph Szymborski's user avatar
4 votes
1 answer
2k views

Too many redirects

I have an app on Heroku which I would like to point to with two different URLs. I use CloudFlare as my name server. My first domain has 8 records; 2 CNAME, 6 MX and one TXT. It looks like so: CNAME &...
Nanor's user avatar
  • 171
4 votes
1 answer
10k views

HTTPS access to S3 bucket through Cloudflare

I'm trying to use Cloudflare to provide https access to an s3 bucket. I've setup the CNAME entry in Cloudfront with pointing to the bucket and I've verified I can access it via http but when I try and ...
sgargan's user avatar
  • 235
4 votes
1 answer
9k views

High # of sockets in TIME-WAIT state, server unresponsive at load

Our app became unresponsive at high loads, with longer wait times. Process usage was abnormally low (~15% CPU utilisation per process, our app runs on 8 processes). Nginx error log output showed a ...
Julian H. Lam's user avatar
4 votes
1 answer
439 views

nginx and cloudlfare ip confusion?

I am using the below config in http block of my nginx.conf to get real ip while using Cloudflare acceleration service: ## Cloudflare settings to get Real IP's set_real_ip_from 204.93.240.0/...
iTech's user avatar
  • 355
4 votes
1 answer
28k views

Set $REMOTE_ADDR to real client IP [closed]

I am hosting a WordPress site on Heroku with Nginx. DNS is behind CloudFlare. My WordPress plugins reports Heroku IPs instead of real client IPs. I have the following Nginx rules: location / { ...
tangrufus's user avatar
  • 141
3 votes
3 answers
10k views

Only allowing traffic from Cloudflare

I am new to Linux System Administration and I am experimenting with iptables trying to learn how to really lock down a system with them. And one thing a friend of mine recommended was that there was a ...
Nick's user avatar
  • 31
3 votes
1 answer
7k views

getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH on nginx webserver via cloudflare

I have a docker infrastructure consisting of 1 nginx reverse proxy 1 nginx web server 1 php7.0 fpm server both the nginx reverse proxy and webserver are using the same docker image but just loaded ...
user618509's user avatar
3 votes
2 answers
4k views

CloudFlare CDN and static site with root on Amazon S3

I've set up an S3 bucket to host my static site. Now I am trying to wrap CloudFlare around this, but I get the following warning when adding a CNAME entry for the root domain in CloudFlare's DNS ...
Harper's user avatar
  • 133
3 votes
2 answers
2k views

How does CloudFlare protect a web site?

I am a little confused about the protection CloudFlare offers. I am directing the www subdomain through CloudFlare with an Orange Cloud, and another subdomain (let's say direct) with a Grey Cloud. But ...
user avatar
3 votes
1 answer
345 views

Iptables list doesn't persist across restarts

I am trying to white list CloudFlare's IP addresses on my server by issuing these: iptables -N whitelist iptables -A whitelist -s 204.93.177.0/24 -j ACCEPT iptables -A whitelist -s 199.27.128.0/21 -j ...
Bob the Builder's user avatar
3 votes
1 answer
2k views

How to prevent DDOS attack impact on Netlify? (downtime + bandwith usage/cost)

Situation: React app that was initially running on a VPS A few days ago, we were the target of a DDOS attack that took the site down. During the attack, we decided to migrate to Netlify. Once ...
ludovico's user avatar

1
2 3 4 5
12