Questions tagged [cloudflare]

CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

Filter by
Sorted by
Tagged with
4 votes
1 answer
6k views

is cloudflare now using let's encrypt certificates for edge?

i just added a new domain to cloudflare and the edge certificate is let's encrypt r3, shown in control panel and by inspecting in browser when on the domain's website. my existing domains still have ...
rvh's user avatar
  • 109
0 votes
1 answer
673 views

Apache and letsencrypt ssl | need assistance from cloudflare gurus or experts in ssl

hope you are all staying well and safe. So just to explain my setup which I have always proffered do which worked for me, until now.. I have: Ubuntu server running apache2 for websites Letsencrypt ...
Jokfil's user avatar
  • 1
1 vote
1 answer
848 views

Cloudflare and AWS - Intermittent 525 SSL Handshake

I'm getting an intermittent (approximately 0.01% of requests) 525 (SSL Handshake failed) between Cloudflare and our AWS EC2 Windows 2016 IIS, with Let's Encrypt CA installed using win-acme running as ...
Dr Rob Lang's user avatar
0 votes
1 answer
168 views

Debian 10 MX hostname issue

I am facing an issue where every single site like intodns, dnsstuff, mx toolbox is reporting that i have 2 issues. Namely: Reverse DNS does not contain the hostname Reverse DNS does not match SMTP ...
AlifOpenSrc's user avatar
1 vote
0 answers
27 views

Application role in preventing DDOS

I have an application that is being planned to be exposed to internet clients via a reverse proxy deployed in the DMZ, . I have recommended that the deployments use WAF/Cloudflare along with this to ...
computinglife's user avatar
1 vote
1 answer
201 views

Website is not following Cloudflare's Pagerules

I'm using Cloudflare's Page Rules to cache absolutely everything on my site (except ajax.php) for at least 5 days (images, css, js are cached 30 days). Although all web content is set to be cached ...
Carlos Santos's user avatar
3 votes
1 answer
2k views

How to prevent DDOS attack impact on Netlify? (downtime + bandwith usage/cost)

Situation: React app that was initially running on a VPS A few days ago, we were the target of a DDOS attack that took the site down. During the attack, we decided to migrate to Netlify. Once ...
ludovico's user avatar
1 vote
1 answer
178 views

Why is my PC doing more than one DNS query for www.ietf.org? [closed]

I'm doing an exercise for a class where I have to flush the DNS cache and then visit www.ietf.org and capture the packets. I got this: The selected query and response are the "main" ones. ...
Segmentation fault's user avatar
2 votes
1 answer
976 views

How does Cloudflare Firwall rules order work?

how does the order of Cloudflare rules work? I read the documentation but doesn't explain it (it's self explanatory apparently) but is it? For example if i want to block a ASN but allow an IP inside ...
Michael Rogers's user avatar
0 votes
1 answer
78 views

Get origin IP in iptable / ufw

I have a site on Cloudflare. I would like to set up an iptable firewall on the server in addition to Cloudflare, to implement rate limiting (Cloudflare have a paid option ...) Problem: The IP received ...
Crazy's user avatar
  • 1
1 vote
1 answer
805 views

High CPU Usage on Digital Ocean Web Server

We have a Laravel website which is currently hosted on Digital Ocean (Nginx). The droplet is a 2 vCPUs, 2 GB Memory, 60 GB SSD, 3 TB transfer running PHP 7.4. We are seeing a steady increase in CPU ...
Senate No. 7's user avatar
0 votes
2 answers
461 views

Can CDN caching prevent DoS attacks?

Let's say I use Cloudflare to cache my images, CSS, and JS files. Requests for the HTML content itself still hit my server and an attacker could use that to his advantage. However, if I tell ...
dodov's user avatar
  • 151
0 votes
1 answer
309 views

Cloudflare + Apache + CSP Headers: Old CSP headers are returned

We are using apache2 on our server, which is behind cloudflare (free plan). I am currently implementing googles recaptcha, which requires me to make changes to our CSP headers. What I did: Change CSP ...
Felix Hagspiel's user avatar
0 votes
0 answers
345 views

Cloudflare CF-IPCountry header wrong with reverse proxy

my website use cloudflare. It has two parts: 1 - api, made with php 2 - frontend, nuxt js reverse proxy I use Cloudflare's "CF-IPCountry" header in order to detect the client country code. ...
lengas's user avatar
  • 1
1 vote
1 answer
1k views

Installing Matomo on Nginx returns 502 Bad Gateway Error

I'm in the process of installing the Matomo Analytics platform on my Debian 10 server, running Nginx and using the Cloudflare DNS and CDN. Unfortunately I get a 502 Bad Gateway error when trying to ...
Andy Sukowski-Bang's user avatar
0 votes
1 answer
252 views

How can I run a TraceRt as if I were at another IP address?

I'm trying test whether my hosting company is blocking traffic from certain IP addresses*. I'd like to confirm that by running a TraceRt between the Cloudflare server IP and our server's IP address. *...
Clay Nichols's user avatar
  • 1,513
-1 votes
2 answers
1k views

AWS SOA record from AWS to Cloudflare

I purchase a domain with AWS to try it out and edited the NS records with CloudFlare records, but I also have another entry for SOA, this is it: Record type SOA – Start of authority record ns-501....
Arturo's user avatar
  • 101
0 votes
1 answer
830 views

Is it possible to block or allow SSH connections to a server on Cloudflare

I want to restrict SSH connections to my server to a country only. I tried GeoIP and Ipfilter without success (Location of authpriv.notice logs on Bitnami). Another solution would be to configure a ...
miguelmorin's user avatar
1 vote
1 answer
409 views

Custom subdomain support with Cloudflare DNS and Netlify Pages

I have a saas app say abc.com serving from Netlify Pages and DNS is managed by Cloudflare. I have set up this by adding CNAME/A in Cloudflare which points to abc.netlify.app/IP. Now I want my users to ...
niksmac's user avatar
  • 71
-1 votes
1 answer
616 views

Virtualmin + Nginx + SSL setup error with cloudflare 521

OS: Ubuntu 20.04 Installed Virtualmin + Nginx + PHP-FPM Everything set up fine, however, when I installed SSL Certificate 3 month’s trial (Fully Valid Cert) not from Letsencrypt ( Reached limit ) ...
Anthonyinit's user avatar
0 votes
0 answers
2k views

TLS error using Cockpit with Cloudflare/Portzilla

I've recently installed cockpit (and quite like it) and decided to use Portzilla on my cloudflare account to set up a subdomain where I can access my cockpit server remotely. I've been getting ...
dnglchlk's user avatar
0 votes
0 answers
214 views

Design for Providing custom CNAMEs using Cloudflare and Lets Encrypt

Currently we have a cloud based SaaS application, that runs behind a domain on Cloudflare. Let's say example.com. The main panel and application is located at cloud.example.com. When a customer signs ...
Mark Barrett's user avatar
0 votes
0 answers
107 views

What is the best way to handle DNS and failover management for a subdomain website when I don't have control of the domain?

Updating DNS for this subdomain would take hours or days, but we'd like to be able to set up a reliable auto-failover mechanism that I think would require faster DNS changes. What is best practice for ...
libbynotzoey's user avatar
0 votes
2 answers
4k views

Is it possible to make reverse dns lookup on cloudflare

Somehow Cloudflare is hiding the real ip of my server. Is there a possibility to check other domains on my ip by reverse DNS? in short I make dig some-server-name.com I got in reply some A records......
adeptofvoltron's user avatar
0 votes
0 answers
853 views

Reverse DNS does not contain the hostname and RDNS_NONE from spam assasing

So i am trying to setup the reverse dns for my server and i got it mapping correctly to my mail domain and i did a test on mail-test but reverse dns failed with: Spam Assasin RDNS_NONE, but on mail ...
Mov Eax's user avatar
0 votes
0 answers
48 views

Cloudflare 522, 525 connection timed out

My website keeps giving 522 connection timeout error. we contacted the cloudflare support team and found that there are some packet loss. because of which we are getting this error. Can you please ...
Web Hosting's user avatar
0 votes
1 answer
2k views

https not working for aws load balancer, also cloudflare cname for @ is not working but anything else works

I have a ec2 instance with a loadbalancer. The loadbalancer has an issued ssl certificate, it says it's active. I will post screenshots of all my settings. The site works on http just fine. Just not ...
Anders Kitson's user avatar
1 vote
1 answer
3k views

Hide site's real IP address like Cloudflare does?

I have multiple sites hosted on an Azure VM. So all the domains are pointing to a single IP of that vm. When someone reverse whois my IP address, he/she could be able to find all the related domains ...
SkyRar's user avatar
  • 113
0 votes
3 answers
3k views

How to use Cloudflare's CDN while we can not change nameservers on WIX

We have a website on WIX (www.example.com). The domain name and name servers are all on WIX. Using the same domain name we have another website (buy.example.com) which is NOT on WIX. The "A ...
Ray Yen's user avatar
  • 43
0 votes
0 answers
301 views

Apache2 / Cloudflare Error 521

My apache2 server encountered a error: "502 Bad Gateway". I started using ExpressJS and this happened. Im doing this because I need to use pug and other backend utilities. Here is my apache2 ...
WhoAboutYT's user avatar
0 votes
0 answers
1k views

How to check AWS cloudfront traffic limit? 504 server error

I have a website that handles ticket selling which opens once a year. Many peoples come to the website at a specific date and time. However, some users received 504 Status Code (Gateway Timeout) from ...
Muffin's user avatar
  • 1
0 votes
0 answers
522 views

Cert-Manager Error Fetching certificate via cloudflare dns01 challenge

I'm trying to create a wildcard cert via cert-manager for my domain. --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: ipa spec: # Secret names are always required. secretName:...
cclloyd's user avatar
  • 613
1 vote
0 answers
480 views

Is it possible to conditionally set RemoteIPHeader?

I am using Cloudflare to manage DNS in a staging setup and often switch between "DNS only" and "Proxied" states. I have Apache listening on port 443 which terminates the ssl and ...
Tome A's user avatar
  • 11
0 votes
1 answer
2k views

How to get Cloudflare SSL to work with IIS website on Azure virtual machine

I have an Azure virtual machine running IIS. The DNS goes through Cloudflare and I have turned SSL on there. However, when I visit https://www.reainvite.com.au I get "This site can’t be ...
Petras's user avatar
  • 249
0 votes
1 answer
739 views

Is it possible to have the root domain on one web hosting and a sub-domain on another?

I have a shared web-hosting with CompanyA and another shared hosting with CompanyB. I own one domain called example.com. I want to host example.com on CompanyA and sub.example.com on CompanyB. Is this ...
Paul's user avatar
  • 11
0 votes
0 answers
33 views

CDN SSL Authentication reliablity

I was having SSL on my main domain. which is let say , "example.com" & it only showed lock/HTTPS icon on "example.com" not any subdomain eg. abc.example.com , xyz.example.com ...
Dhaval Joshi's user avatar
0 votes
1 answer
1k views

Nginx proxy_pass multiple redirects issues

I'm having issues with nginx and 302 redirects to files that are behind multiple redirects. so I'm trying to proxy this request and get 502 bad gateway. location /85319 { proxy_pass https://traffic....
Saimon's user avatar
  • 1
0 votes
1 answer
1k views

Delegate main domain and part of subdomains to different nameserver

Let's assume I have: Registered myapp.tld domain with ns.some.tld nameserver set DigitalOcean droplets: foo.myapp.tld bar.myapp.tld Cloudflare zone for: myapp.tld es.myapp.tld de.myapp.tld other ...
Wirone's user avatar
  • 103
0 votes
2 answers
2k views

Extremely High TTFB on Wordpress website - Not dabase or server ... what else could cause it?

I'm running a Wordpress ecommerce website on a dedicated VPS with 4CPUs and 6gb RAM, so resources are not an issue . On top of this I have VestaCP installed, with a Nginx + Apache + Php-FPM server . ...
Optimus Servers's user avatar
1 vote
1 answer
1k views

Show upstream Cloudflare server IP after enabled nginx / set_real_ip_from

I've followed cloudflare doc [1] that enabled set_real_ip_from in order to show original client's IP My log format is log_format main '$remote_addr $http_cf_connecting_ip $http_x_forwarded_for ...
Ryan's user avatar
  • 6,011
0 votes
1 answer
254 views

Site opens in HTTP even though I have defined HTTPS

I have a WordPress site hosted on nginx. I am using Cloudflare reverse proxy and SSL. I have setup so site will only open in https and even if someone uses http then it will be redirected to https ...
Frank Martin's user avatar
1 vote
0 answers
343 views

Cloudflare blocks our "between subdomains" url rewrites with a 403 due to X-ORIGINAL-URL header(CVE-2018-14773)

Question: How to remove the X-ORIGINAL-URL header in Azure ARR? Cloudflare blocks our "between subdomains" url rewrites with a 403 due to X-ORIGINAL-URL header (CVE-2018-14773). We are using ...
user14142426's user avatar
1 vote
1 answer
49 views

Can I write server IP instead of DNS when changing nameservers

My website is currently using CloudFlare reverse proxy. In my nameservers I have defined DNS provided by CloudFlare. I am having some issue with CloudFlare so want to test it by removing reverse proxy....
Frank Martin's user avatar
0 votes
1 answer
51 views

Cloudflare prohibits API GET request

I am having a trouble with my API's GET request. I settled cloudflare as a firewall for my web application. Behind it, my web application is working on Nginx server. All HTTP Requests are working for ...
Onur Göker's user avatar
0 votes
1 answer
585 views

Nginx reverse dns with cloudflare

https://www.nginx.com/resources/wiki/modules/rdns/ https://github.com/flant/nginx-http-rdns How do you get the nginx-http-rdns module to work with cloudflare free DDoS protection? I wish to use this ...
masuking's user avatar
-1 votes
1 answer
2k views

Forward SSH from Reverse Proxy Server through VPN to Home Server

I'm trying to set up GitLab on my home server. HTTPS is working and I can get to GitLab's interface, but SSH is not and thus I can't push code to the server. Here is the setup: Cloudflare <--> ...
Cody Dostal's user avatar
0 votes
0 answers
613 views

Nginx/Cloudflare can I proxy using server block instead of DNS

I am running into slightly annoying issues setting up Cloudflare's custom error page functionality, so I would like to figure out how I can proxy_pass to cloudflare only when my server does not return ...
ViaTech's user avatar
  • 101
2 votes
3 answers
9k views

Configuring SMTP through Cloudflare

My domain registrar is Cloudflare and my site is hosted through A2 Hosting. My problem is that my email worked fine when A2 Hosting was my domain registrar and web host. Now, neither Thunderbird or ...
PrismaPixel Studios's user avatar
0 votes
1 answer
192 views

Does CDN defeat the purpose of server-level GeoIP blocking?

Looking for second opinions. Suppose a website is set up so that only IPs from country X are allowed read/write access. This server goes through a CDN such as Cloudflare. Because the GeoIP block is at ...
cvlo's user avatar
  • 1
12 votes
1 answer
15k views

Adding CloudFlare to S3 bucket

I have an Amazon S3 bucket that contains thousands of JPGs and similar media assets. (It's the storage for my forums.) I don't host a static site in this bucket (no HTML of any kind) and it's ...
Eric's user avatar
  • 1,137

1 2 3
4
5
12