CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

learn more… | top users | synonyms

7
votes
2answers
3k views

Using dd-wrt Dynamic DNS client with CloudFlare

I'm trying to configure Dynamic DNS client on my router with dd-wrt (v24-sp2) firmware so it would dynamically change IP address in one of the DNS records. Unfortunately I encountered a problem… Here ...
5
votes
5answers
2k views

Using namecheap dns with cloudflare

Since CloudFlare doesn't provide E-mail forwarding I need to leave my DNS management on Namecheap. What DNS records (A,CNAME,...) would I need to point to CloudFlare (and to where) to be able to ...
4
votes
2answers
2k views

Setting up CloudFlare with Route 53?

I'm trying to get CloudFlare to sit in front of Route 53. I have my main web server on an ELB (which doesn't have an IP address). CloudFlare needs an IP for an A record, so how can I accomplish this?
4
votes
1answer
299 views

Amazon S3 appears to be blocking cloudflare IP addresses. How do I fix it?

I have static content that is being served by Cloudflare. Cloudflare points to Amazon S3 to pick up the static content and serves it via a CNAME (cdn.mydomain.com). The bucket is setup properly and ...
3
votes
2answers
1k views

How does CloudFlare protect a web site?

I am a little confused about the protection CloudFlare offers. I am directing the www subdomain through CloudFlare with an Orange Cloud, and another subdomain (let's say direct) with a Grey Cloud. But ...
3
votes
1answer
295 views

Iptables list doesn't persist across restarts

I am trying to white list CloudFlare's IP addresses on my server by issuing these: iptables -N whitelist iptables -A whitelist -s 204.93.177.0/24 -j ACCEPT iptables -A whitelist -s 199.27.128.0/21 -j ...
3
votes
1answer
1k views

How secure is CloudFlare's basic SSL

CloudFlare's basic SSL package provides SSL encryption for you site, but only between your customer's browser, and the CloudFlare server where SSL is terminated. The connection between CloudFlare and ...
3
votes
1answer
547 views

iptables - drop all HTTP(S) traffic but from CloudFlare

I would like to allow only HTTP(S) traffic coming from CloudFlare. In that way attackers cannot attack the server directly. I know CloudFlare is not mainly a DDoS mitigator, but I would like to try ...
2
votes
4answers
1k views

Statically mirroring a heavy trafficked site, CloudFlare as DNS

I run a fairly heavy trafficked website and due to some unfortunate incidents the machines that are in my cloud at Linode went down. And I have only a single Load Balancer machine exposed to the ...
2
votes
2answers
1k views

CloudFlare offers DNS root CNAMEs. Any resolution gotchas to be aware of?

I'm not that familiar with the inner workings of DNS, preferring to just add my CNAMEs and A records as appropriate, and leave the behind the scenes to other services. I host a few sites on Amazon S3, ...
2
votes
1answer
904 views

AWS Free Usage Tier + Cloudflare… possible?

If I throw my MySQL/PHP app up on a Amazon EC2 instance (using their AWS Free Usage Tier program) and couple it with CloudFlare (the free plan of course) roughly how many daily visitors can I ...
2
votes
1answer
2k views

Cloudflare, reverse DNS and php mail ending up in spam folder

I've been using Cloudflare to host my DNS, and PHPMailer to send e-mail through ZOHOs SMTP servers with great success, but have found that all my e-mails are hitting Gmail, Zoho and Hotmails spam ...
2
votes
2answers
554 views

iptables with Cloudflare

I'm using fail2ban to block web vulnerability scanners. It is working correctly when visiting the site if CloudFlare is bypassed, but a user can still access it if going through it. I have ...
2
votes
2answers
631 views

Correct usage of whitelisting cloudflare IPs in iptables

I'm relatively new to using the command line so I'm understandably nervous about fiddling around with IP tables and accidentally doing something wrong which consequently opens up vulnerabilities in ...
2
votes
1answer
424 views

Using Varnish (only) for DDoS mitigation [duplicate]

My VPS is suffering from a (D)DoS doing a SYN flood with spoofed IPs. I'm right now searching from ways how to be able to defend (at least a bit) against it. It's running a DirectAdmin apache2 ...
1
vote
2answers
228 views

MX lookup failed

This is a part of my dns-zone file: ;; MX Records mx.domain.de. 300 IN MX 1 direct.domain.de. ;; CNAME Records www.domain.de. 300 IN CNAME domain.de. mail.domain.de. 300 IN CNAME ...
1
vote
2answers
408 views

Why do DNS services propagate so much faster? [closed]

Say I want to point my domain blah.example.com from a server located at IP addres 1.2.3.4, to a different server located at IP address 5.6.7.8. This requires a DNS change. Why is it that when I log ...
1
vote
2answers
1k views

CloudFlare CDN and static site with root on Amazon S3

I've set up an S3 bucket to host my static site. Now I am trying to wrap CloudFlare around this, but I get the following warning when adding a CNAME entry for the root domain in CloudFlare's DNS ...
1
vote
2answers
2k views

Cloudflare and Cache-Control

I am experimenting with Cloudflare, mainly to relief the load of my webserver in peak moments. I just signed up and it seems to be working (all my traffic is being proxied) but Cloudflare does not ...
1
vote
1answer
3k views

Setting an SPF/DKIM record with CloudFlare

What is the correct way to setup an SPF record? Use TXT and add the following? v=spf1 a mx include:mydomain.tld ~all UPDATED: After using the following: v=spf1 a mx ~all I get this: ...
1
vote
1answer
533 views

Using CloudFlare with a mirror site

I am developing a mirror website (where people can download files, sort of like a FTP). I was wondering about using CloudFlare to help cut down on bandwidth usage. I have the mirror website with ...
1
vote
1answer
103 views

How to setup a “server is down” message like Reddit and Twitter does? [closed]

I have a VPS with our Ubuntu LoCo Team's blog, but I want to setup a message that says the server is down when it happens, like Reddit and Twitter does. For example, if I restart the server or my VPS ...
1
vote
1answer
125 views

Slow loading PHP script makes Cloudflare block connections

I use php-fpm and nginx, I am running a slow script but it's blocking all Cloudflare connections, most likely it's a php-fpm issue but I can't find anything via Google. If I run the php script ...
1
vote
2answers
122 views

Does CloudFlare make a site a greater potential DDOS target?

CloudFlare has gotten a lot of press recently as protecting businesses from DDOS attacks. But from looking at their twitter feed, it looks like they are targeted every day, and large segments of their ...
1
vote
1answer
451 views

DNS subdomain catch-all linking to my external address

First of all, I'm not that into DNS, so maybe the answer to this question is very obvious, sorry in either way. What I want is this: A DNS record which catches all non-existing subdomains on my site ...
1
vote
1answer
1k views

apxs cannot install mod_cloudflare on centos

[ Linux - CentOS - Apache 2.2 - mod_cloudflare - apxs2 ] I have changed my nameservers to point to CloudFlare. The problem is that all the IP addresses are coming in as CloudFlare's. This is no good, ...
1
vote
1answer
50 views

High # of sockets in TIME-WAIT state, server unresponsive at load

Our app became unresponsive at high loads, with longer wait times. Process usage was abnormally low (~15% CPU utilisation per process, our app runs on 8 processes). Nginx error log output showed a ...
1
vote
0answers
87 views

Some emails don't arrive

Yesterday, somehow a DNS Zone File got removed from Cloudflare. So after re-editing the file everything seemed okay. Now there's the problem that some emails don't arrive in the inbox. Strange thing ...
1
vote
0answers
112 views

nginx and cloudlfare ip confusion?

I am using the below config in http block of my nginx.conf to get real ip while using Cloudflare acceleration service: ## Cloudflare settings to get Real IP's set_real_ip_from ...
1
vote
0answers
193 views

Stuck with DNS questions during migration to AWS EC2 + Route 53

We're running a little hosting service with two nameservers registered for us at a local registrar: ns1.ourcompany.com ns2.ourcompany.com Now i want to move over to cloudflare with all the DNS ...
1
vote
0answers
480 views

nginx 502 bad gateway some files

im using cloudflare. my site working good but not loading any images, css files and js files. my server details; ubuntu 12.04 nginx/1.1.19 php5-fpm mysql you can check live here Check with www and ...
0
votes
3answers
2k views

Only allowing traffic from Cloudflare

I am new to Linux System Administration and I am experimenting with iptables trying to learn how to really lock down a system with them. And one thing a friend of mine recommended was that there was a ...
0
votes
1answer
391 views

AWS EC2 - Present UK IP address for outgoing requests from server in AWS Ireland data centre

We have an application that monitors client websites and does some crawling. We're looking to move the application to existing EC2 servers that we run, but testing suggests that we're going to have ...
0
votes
2answers
217 views

How does Cloudflare know about my Subdomains?

I just signed up Cloudfare and they showed me a list of my subdomains by scanning my domain. How do they do this? What technology is used to scan all subdomains related to a root domain?
0
votes
3answers
623 views

Two DNS service providers

Is there a way to have two DNS service providers? I have DNS Made Easy account and Cloudflare but I want to use both. My domain registrar has nameservers pointing to DNS Made Easy How would this ...
0
votes
1answer
1k views

DNS takes forever - Using Pingdom

So I am using the new CloudFlare.. I have a GoDaddy shared hosting account, which i know isn't the fastest in the world, but DNS seems very slow. I have a Wordpress blog configured as the following: ...
0
votes
1answer
69 views

How to make a domain receiving email behind cloudflare?

I have a web server hosting multiple domains (centos + postfix + dovcot), one of my domain its dns is hosted on cloudflare (ie. abcd.com), but when I use gmail to send email to a user@abcd.com, ...
0
votes
2answers
883 views

Using cloudflare as the only load balancer

Say I have 3 vps nodes in linode to serve traffic on a single website. Linode themselves provides a node balancing solution: https://www.linode.com/nodebalancers But I use cloudflare and was ...
0
votes
3answers
479 views

Is it sensible to use both pagespeed and cloudflare?

We're using google's pagespeed service. From what I can gather it just draws the page from our webserver and runs it through the mod_pagespeed optimisation module. I'm wondering does it do any ...
0
votes
2answers
751 views

How to add subdomains to cloudflare's network?

I signed up for cloudflare in order to speed up my website & protect it from attacks. But I'm unable to figure out how to add subdomains & sites installed at (directories) ...
0
votes
1answer
313 views

DNS nameserver with cloudflare

I originally bought a domain from namecheap.com then I bought hosting at inmotionhosting, where I pointed the DNS from namecheap to inmotionhosting... now I signed up with cloudflare and pointed DNS ...
0
votes
1answer
812 views

Fail2Ban adds iptable rules but they are not working?

Fail2Ban just blocked my IP for 3 SSH attempts. It added the iptables rule and I can see it using the "sudo iptables -L -n" command. But I can still access the site and login through SSH! What might ...
0
votes
2answers
1k views

Cloudflare hurting performance

I recently set up cloudflare on a new site I'm about to launch. I ran some benchmarks with it on and with it off and the output is extremely troubling. Does this make sense to anyone? Before when ...
0
votes
2answers
172 views

Configuring DNS for Cloudflare

I'm trying to configure the DNS for my CloudFlare in my cPanel my host provided me and this keeps happening! But, the thing is that my domain is already pointed to my CloudFlare and I waited 24 ...
0
votes
1answer
447 views

How do I deny all requests not from cloudflare?

I've recently gotten denial of service attacks from multiple proxy ips, so I installed cloudflare to prevent this. Then I started noticing that they're bypassing cloudflare by connecting directly to ...
0
votes
1answer
72 views

AWS subdomains issues

Hi guys! I've tried to create a couple of subdomains for my website. I created virtual hosts in the apache configuration and I added the records to the Amazon Route53. But now, it's working sometimes ...
0
votes
3answers
332 views

Issue varnish purge through CloudFlare to Varnish

I've been working on this for a while and can't seem to find any solution. I have varnish sitting in front of my nginx server, with CloudFlare sitting in front. When I issue a curl -X PURGE host ...
0
votes
3answers
244 views

How to handle a DDoS attack on a search engine? [duplicate]

We are running a search engine and are seeing a huge amount of fake search queries coming in over the last days from thousands of IP addresses. There is no real pattern in terms of queries text or IP ...
0
votes
1answer
195 views

SSH to a server with multiple reverse DNS entries [duplicate]

While SSHing into my server with an RSA key, I get this message: Address 255.100.236.105 1 maps to a1.example.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Even ...
0
votes
1answer
132 views

isup.me reported site down but I still can access website like normal

I have nginx as backend running WordPress (with w3tc cache plugin installed), varnish as reserve caching proxy, and cloudflare set up. Sometimes, I see isup.me reported my website is down but in fact ...