What is the best way do bypass single subdomain (we use their proxy for caching purposes but don't want it on specific subdomain to speed up some requests). Final server is hosted on Heroku.

We like CloudFlare because they take care about certificates (expiry etc). Heroku also does the same thing using ACM (Lets encrypt) but those two doesn't work together.

If I understand correctly I should buy a certificate from 3rd party and take care about updating certificate on my own. In this case I should use 'Full (Strict)' option in Crypto -> SSL section on Cloudflare. Than it should be fine to simply turn off HTTP proxy for specific domain. Is this It?

Since we have staging and production server we probably can not use add-ons? (e.g. expedited SSL or Fast Track SSL). If I buy wildcard certificate from 3rd party, can I use it on staging & production server?

What is the best way to do it?

  • Click the orange cloud until it turns gray. Nothing else is relevant to CloudFlare. Aug 1 '18 at 15:02
  • But if I use Full SSL (not Strict), I have to upload certificate to Heroku which is not signed by authorised authority -> SSL will not work. Would Full (Strict) with 3rd party certificate (not free anymore!) solve this issue?
    – knagode
    Aug 1 '18 at 15:06
  • It doesn't matter if you don't send the traffic through CloudFlare. Aug 1 '18 at 15:07
  • Exactly. But I want that one subdomains goes trough CF proxy (caching purpose) but the other subdomain should bypass it (to speed up requests which should never be cached) .. Both subdomains are pointed to same Heroku instance .. That is why there is some interference :)
    – knagode
    Aug 1 '18 at 15:12
  • Full (Strict) works perfectly well with Let's Encrypt AFAIK. At least, it works on all my CloudFlare sites. Aug 1 '18 at 15:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.