CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

learn more… | top users | synonyms

10
votes
5answers
4k views

Using namecheap dns with cloudflare

Since CloudFlare doesn't provide E-mail forwarding I need to leave my DNS management on Namecheap. What DNS records (A,CNAME,...) would I need to point to CloudFlare (and to where) to be able to ...
7
votes
2answers
4k views

Using dd-wrt Dynamic DNS client with CloudFlare

I'm trying to configure Dynamic DNS client on my router with dd-wrt (v24-sp2) firmware so it would dynamically change IP address in one of the DNS records. Unfortunately I encountered a problem… Here ...
7
votes
2answers
4k views

Setting up CloudFlare with Route 53?

I'm trying to get CloudFlare to sit in front of Route 53. I have my main web server on an ELB (which doesn't have an IP address). CloudFlare needs an IP for an A record, so how can I accomplish this?
6
votes
2answers
5k views

Using CloudFlare as the only load balancer

Say I have 3 VPS nodes with Linode to serve traffic on a single website. Linode themselves provide a node balancing solution. But I use CloudFlare and was wondering after I read their blog article on ...
6
votes
1answer
714 views

Does cloudflare know the decrypted content when using a https connection?

CloudFlare provides ssl support. However, if a visitor visits a website protected by CloudFlare, is CloudFlare able to know the plain data transfered during this visit? There are a few SSL options: ...
4
votes
1answer
3k views

How secure is CloudFlare's basic SSL

CloudFlare's basic SSL package provides SSL encryption for you site, but only between your customer's browser, and the CloudFlare server where SSL is terminated. The connection between CloudFlare and ...
4
votes
1answer
254 views

nginx and cloudlfare ip confusion?

I am using the below config in http block of my nginx.conf to get real ip while using Cloudflare acceleration service: ## Cloudflare settings to get Real IP's set_real_ip_from ...
4
votes
1answer
541 views

Amazon S3 appears to be blocking cloudflare IP addresses. How do I fix it?

I have static content that is being served by Cloudflare. Cloudflare points to Amazon S3 to pick up the static content and serves it via a CNAME (cdn.mydomain.com). The bucket is setup properly and ...
3
votes
2answers
2k views

How does CloudFlare protect a web site?

I am a little confused about the protection CloudFlare offers. I am directing the www subdomain through CloudFlare with an Orange Cloud, and another subdomain (let's say direct) with a Grey Cloud. But ...
3
votes
1answer
311 views

Iptables list doesn't persist across restarts

I am trying to white list CloudFlare's IP addresses on my server by issuing these: iptables -N whitelist iptables -A whitelist -s 204.93.177.0/24 -j ACCEPT iptables -A whitelist -s 199.27.128.0/21 -j ...
3
votes
1answer
421 views

Unable to allow/deny access to IPs

I have an otherwise happily working server on Ubuntu 14.04. I'm trying to restrict access to a file using an allow/deny block: <Files "login.php"> order deny,allow deny from all allow from ...
3
votes
1answer
1k views

iptables - drop all HTTP(S) traffic but from CloudFlare

I would like to allow only HTTP(S) traffic coming from CloudFlare. In that way attackers cannot attack the server directly. I know CloudFlare is not mainly a DDoS mitigator, but I would like to try ...
3
votes
2answers
2k views

CloudFlare offers DNS root CNAMEs. Any resolution gotchas to be aware of?

I'm not that familiar with the inner workings of DNS, preferring to just add my CNAMEs and A records as appropriate, and leave the behind the scenes to other services. I host a few sites on Amazon S3, ...
3
votes
1answer
4k views

Cloudflare, reverse DNS and php mail ending up in spam folder

I've been using Cloudflare to host my DNS, and PHPMailer to send e-mail through ZOHOs SMTP servers with great success, but have found that all my e-mails are hitting Gmail, Zoho and Hotmails spam ...
3
votes
1answer
2k views

High # of sockets in TIME-WAIT state, server unresponsive at load

Our app became unresponsive at high loads, with longer wait times. Process usage was abnormally low (~15% CPU utilisation per process, our app runs on 8 processes). Nginx error log output showed a ...
2
votes
2answers
3k views

CloudFlare CDN and static site with root on Amazon S3

I've set up an S3 bucket to host my static site. Now I am trying to wrap CloudFlare around this, but I get the following warning when adding a CNAME entry for the root domain in CloudFlare's DNS ...
2
votes
4answers
2k views

Statically mirroring a heavy trafficked site, CloudFlare as DNS

I run a fairly heavy trafficked website and due to some unfortunate incidents the machines that are in my cloud at Linode went down. And I have only a single Load Balancer machine exposed to the ...
2
votes
1answer
5k views

Setting an SPF/DKIM record with CloudFlare

What is the correct way to setup an SPF record? Use TXT and add the following? v=spf1 a mx include:mydomain.tld ~all UPDATED: After using the following: v=spf1 a mx ~all I get this: ...
2
votes
1answer
87 views

Custom SSL doesn't show when using CloudFlare

I have an EV certificate from godaddy. It works fine and the green address bar with the name of my company shows up when I use it without cloudflare. However when I change my DNS to cloudflare and ...
2
votes
1answer
3k views

How to make a domain receiving email behind cloudflare?

I have a web server hosting multiple domains (centos + postfix + dovcot), one of my domain its dns is hosted on cloudflare (ie. abcd.com), but when I use gmail to send email to a user@abcd.com, ...
2
votes
2answers
421 views

How does Cloudflare know about my Subdomains?

I just signed up Cloudfare and they showed me a list of my subdomains by scanning my domain. How do they do this? What technology is used to scan all subdomains related to a root domain?
2
votes
1answer
1k views

AWS Free Usage Tier + Cloudflare… possible?

If I throw my MySQL/PHP app up on a Amazon EC2 instance (using their AWS Free Usage Tier program) and couple it with CloudFlare (the free plan of course) roughly how many daily visitors can I ...
2
votes
1answer
51 views

Too many redirects

I have an app on Heroku which I would like to point to with two different URLs. I use CloudFlare as my name server. My first domain has 8 records; 2 CNAME, 6 MX and one TXT. It looks like so: CNAME ...
2
votes
2answers
1k views

Cloudflare doesn't cache as expected

I'm wondering why Cloulflare would not cache a certain static js file. Given the reuqest: curl -I http://www.testlifeinuk.com/dist/lifeinuk.js the headers returned like: HTTP/1.1 200 OK Date: ...
2
votes
2answers
719 views

iptables with Cloudflare

I'm using fail2ban to block web vulnerability scanners. It is working correctly when visiting the site if CloudFlare is bypassed, but a user can still access it if going through it. I have ...
2
votes
1answer
113 views

Social networks and Cloudflare free SSL

Let me expose my setup and problems. Maybe some of you will have ideas for me to test. Setup On Digital Ocean : I have one web server running a web site with NGINX in the front (Ruby on Rails ...
2
votes
1answer
2k views

HTTPS access to S3 bucket through Cloudflare

I'm trying to use Cloudflare to provide https access to an s3 bucket. I've setup the CNAME entry in Cloudfront with pointing to the bucket and I've verified I can access it via http but when I try and ...
2
votes
1answer
1k views

How do I deny all requests not from cloudflare?

I've recently gotten denial of service attacks from multiple proxy ips, so I installed cloudflare to prevent this. Then I started noticing that they're bypassing cloudflare by connecting directly to ...
2
votes
0answers
429 views

How to bypass cloudflare caching like reddit does

Someone knows how reddit manages to bypass cloudflare static html caching once the user logs in successfully with a reload of page? I see that the current page gets reloaded after a successful login. ...
2
votes
2answers
1k views

Correct usage of whitelisting cloudflare IPs in iptables

I'm relatively new to using the command line so I'm understandably nervous about fiddling around with IP tables and accidentally doing something wrong which consequently opens up vulnerabilities in ...
2
votes
1answer
610 views

Using Varnish (only) for DDoS mitigation [duplicate]

My VPS is suffering from a (D)DoS doing a SYN flood with spoofed IPs. I'm right now searching from ways how to be able to defend (at least a bit) against it. It's running a DirectAdmin apache2 ...
1
vote
1answer
7k views

Redirect loop using cloudflare's Flexible ssl

I am trying to implement Flexible SSL provided by CloudFlare to my site. Here is my nginx config: # PHP-FPM upstream; change it accordingly to your local config! upstream php-fpm { server ...
1
vote
3answers
3k views

Only allowing traffic from Cloudflare

I am new to Linux System Administration and I am experimenting with iptables trying to learn how to really lock down a system with them. And one thing a friend of mine recommended was that there was a ...
1
vote
1answer
73 views

Do I have to have the IP address of a server to initiate a DMCA takedown if the server is behind a service like Cloudflare?

We have some content that is, well, "contested". The site that is misusing our content is being hosted by Cloudflare. I'm concerned that I will need to know the IP address of the server hosting the ...
1
vote
2answers
906 views

Registered domain using Route 53, using Cloudflare for DNS, having problems configuring DNS correctly

I've been trying to configure a Github Pages + Universal SSL from Cloudflare setup, unfortunately while the Jekyll/Github Pages part is going well, DNS configuration is not going as well. I've bought ...
1
vote
2answers
520 views

Access my server through SSH with the domain (with Cloudflare)

I have this server (44.44.44.44, for instance) running a webserver. I have routed pollnote.com to the server to access my webserver. Everything works fine. To access the server, I added my Public Key ...
1
vote
2answers
742 views

MX lookup failed

This is a part of my dns-zone file: ;; MX Records mx.domain.de. 300 IN MX 1 direct.domain.de. ;; CNAME Records www.domain.de. 300 IN CNAME domain.de. mail.domain.de. 300 IN CNAME ...
1
vote
2answers
785 views

Why do DNS services propagate so much faster? [closed]

Say I want to point my domain blah.example.com from a server located at IP addres 1.2.3.4, to a different server located at IP address 5.6.7.8. This requires a DNS change. Why is it that when I log ...
1
vote
2answers
2k views

Cloudflare and Cache-Control

I am experimenting with Cloudflare, mainly to relief the load of my webserver in peak moments. I just signed up and it seems to be working (all my traffic is being proxied) but Cloudflare does not ...
1
vote
1answer
346 views

SSL VirtualHost not using DocumentRoot

I'm trying to set up a self-signed SSL certificate between my own VPS and Cloudflare (next to Full SSL). I'm using the following VirtualHosts for this: <VirtualHost *:80> ServerName ...
1
vote
1answer
450 views

Handling POST requests from blocked IP's

I have a malicious user targeting my site, sending a large amount of POST requests. I have automated systems to block abusing IP's however the problem is I am blocking them within my PHP code via a ...
1
vote
1answer
731 views

Using CloudFlare with a mirror site

I am developing a mirror website (where people can download files, sort of like a FTP). I was wondering about using CloudFlare to help cut down on bandwidth usage. I have the mirror website with ...
1
vote
2answers
401 views

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) ...
1
vote
3answers
219 views

Does CloudFlare make a site a greater potential DDOS target?

CloudFlare has gotten a lot of press recently as protecting businesses from DDOS attacks. But from looking at their twitter feed, it looks like they are targeted every day, and large segments of their ...
1
vote
1answer
120 views

How to setup a “server is down” message like Reddit and Twitter does? [closed]

I have a VPS with our Ubuntu LoCo Team's blog, but I want to setup a message that says the server is down when it happens, like Reddit and Twitter does. For example, if I restart the server or my VPS ...
1
vote
2answers
2k views

Cloudflare hurting performance

I recently set up cloudflare on a new site I'm about to launch. I ran some benchmarks with it on and with it off and the output is extremely troubling. Does this make sense to anyone? Before when ...
1
vote
1answer
36 views

Does OCSP stapling increase performance for websites behind CloudFlare?

Should a website trying to increase performance that uses the CloudFlare CDN (or any CDN really) who already do OCSP stapling configure OCSP stapling on their instance of Nginx if "Full SSL" setting ...
1
vote
1answer
66 views

Redirect www to naked domain using CloudFlare

I would like all my requests to www.example.com to be redirect to example.com, in order to ease anaylitics and for marketing reasons. I could not find out how to this this with CloudFlare (I was used ...
1
vote
1answer
494 views

Use HTTP 1.0 in Apache VirtualHost

I would like to use only HTTP 1.0 on a certain VirtualHost in Apache. The reason for doing so is that I use CloudFlare, and my apps requires the Content-Length header in the HTTP response. However, ...
1
vote
1answer
279 views

Slow loading PHP script makes Cloudflare block connections

I use php-fpm and nginx, I am running a slow script but it's blocking all Cloudflare connections, most likely it's a php-fpm issue but I can't find anything via Google. If I run the php script ...