Questions tagged [cloudflare]
CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.
583
questions
4
votes
1
answer
6k
views
is cloudflare now using let's encrypt certificates for edge?
i just added a new domain to cloudflare and the edge certificate is let's encrypt r3, shown in control panel and by inspecting in browser when on the domain's website.
my existing domains still have ...
0
votes
1
answer
673
views
Apache and letsencrypt ssl | need assistance from cloudflare gurus or experts in ssl
hope you are all staying well and safe.
So just to explain my setup which I have always proffered do which worked for me, until now..
I have:
Ubuntu server running apache2 for websites
Letsencrypt ...
1
vote
1
answer
848
views
Cloudflare and AWS - Intermittent 525 SSL Handshake
I'm getting an intermittent (approximately 0.01% of requests) 525 (SSL Handshake failed) between Cloudflare and our AWS EC2 Windows 2016 IIS, with Let's Encrypt CA installed using win-acme running as ...
0
votes
1
answer
168
views
Debian 10 MX hostname issue
I am facing an issue where every single site like intodns, dnsstuff, mx toolbox is reporting that i have 2 issues.
Namely:
Reverse DNS does not contain the hostname
Reverse DNS does not match SMTP ...
1
vote
0
answers
27
views
Application role in preventing DDOS
I have an application that is being planned to be exposed to internet clients via a reverse proxy deployed in the DMZ, . I have recommended that the deployments use WAF/Cloudflare along with this to ...
1
vote
1
answer
201
views
Website is not following Cloudflare's Pagerules
I'm using Cloudflare's Page Rules to cache absolutely everything on my site (except ajax.php) for at least 5 days (images, css, js are cached 30 days).
Although all web content is set to be cached ...
3
votes
1
answer
2k
views
How to prevent DDOS attack impact on Netlify? (downtime + bandwith usage/cost)
Situation:
React app that was initially running on a VPS
A few days ago, we were the target of a DDOS attack that took the site down.
During the attack, we decided to migrate to Netlify.
Once ...
1
vote
1
answer
178
views
Why is my PC doing more than one DNS query for www.ietf.org? [closed]
I'm doing an exercise for a class where I have to flush the DNS cache and then visit www.ietf.org and capture the packets. I got this:
The selected query and response are the "main" ones. ...
2
votes
1
answer
976
views
How does Cloudflare Firwall rules order work?
how does the order of Cloudflare rules work? I read the documentation but doesn't explain it (it's self explanatory apparently) but is it?
For example if i want to block a ASN but allow an IP inside ...
0
votes
1
answer
78
views
Get origin IP in iptable / ufw
I have a site on Cloudflare.
I would like to set up an iptable firewall on the server in addition to Cloudflare, to implement rate limiting (Cloudflare have a paid option ...)
Problem: The IP received ...
1
vote
1
answer
805
views
High CPU Usage on Digital Ocean Web Server
We have a Laravel website which is currently hosted on Digital Ocean (Nginx). The droplet is a 2 vCPUs, 2 GB Memory, 60 GB SSD, 3 TB transfer running PHP 7.4. We are seeing a steady increase in CPU ...
0
votes
2
answers
461
views
Can CDN caching prevent DoS attacks?
Let's say I use Cloudflare to cache my images, CSS, and JS files. Requests for the HTML content itself still hit my server and an attacker could use that to his advantage.
However, if I tell ...
0
votes
1
answer
309
views
Cloudflare + Apache + CSP Headers: Old CSP headers are returned
We are using apache2 on our server, which is behind cloudflare (free plan).
I am currently implementing googles recaptcha, which requires me to make changes to our CSP headers.
What I did:
Change CSP ...
0
votes
0
answers
345
views
Cloudflare CF-IPCountry header wrong with reverse proxy
my website use cloudflare. It has two parts:
1 - api, made with php
2 - frontend, nuxt js reverse proxy
I use Cloudflare's "CF-IPCountry" header in order to detect the client country code.
...
1
vote
1
answer
1k
views
Installing Matomo on Nginx returns 502 Bad Gateway Error
I'm in the process of installing the Matomo Analytics platform on my Debian 10 server, running Nginx and using the Cloudflare DNS and CDN. Unfortunately I get a 502 Bad Gateway error when trying to ...
0
votes
1
answer
252
views
How can I run a TraceRt as if I were at another IP address?
I'm trying test whether my hosting company is blocking traffic from certain IP addresses*.
I'd like to confirm that by running a TraceRt between the Cloudflare server IP and our server's IP address.
*...
-1
votes
2
answers
1k
views
AWS SOA record from AWS to Cloudflare
I purchase a domain with AWS to try it out and edited the NS records with CloudFlare records, but I also have another entry for SOA, this is it:
Record type
SOA – Start of authority record
ns-501....
0
votes
1
answer
830
views
Is it possible to block or allow SSH connections to a server on Cloudflare
I want to restrict SSH connections to my server to a country only. I tried GeoIP and Ipfilter without success (Location of authpriv.notice logs on Bitnami). Another solution would be to configure a ...
1
vote
1
answer
409
views
Custom subdomain support with Cloudflare DNS and Netlify Pages
I have a saas app say abc.com serving from Netlify Pages and DNS is managed by Cloudflare.
I have set up this by adding CNAME/A in Cloudflare which points to abc.netlify.app/IP. Now I want my users to ...
-1
votes
1
answer
616
views
Virtualmin + Nginx + SSL setup error with cloudflare 521
OS: Ubuntu 20.04
Installed Virtualmin + Nginx + PHP-FPM
Everything set up fine, however, when I installed SSL Certificate 3 month’s trial (Fully Valid Cert) not from Letsencrypt ( Reached limit ) ...
0
votes
0
answers
2k
views
TLS error using Cockpit with Cloudflare/Portzilla
I've recently installed cockpit (and quite like it) and decided to use Portzilla on my cloudflare account to set up a subdomain where I can access my cockpit server remotely. I've been getting ...
0
votes
0
answers
214
views
Design for Providing custom CNAMEs using Cloudflare and Lets Encrypt
Currently we have a cloud based SaaS application, that runs behind a domain on Cloudflare. Let's say example.com.
The main panel and application is located at cloud.example.com. When a customer signs ...
0
votes
0
answers
107
views
What is the best way to handle DNS and failover management for a subdomain website when I don't have control of the domain?
Updating DNS for this subdomain would take hours or days, but we'd like to be able to set up a reliable auto-failover mechanism that I think would require faster DNS changes. What is best practice for ...
0
votes
2
answers
4k
views
Is it possible to make reverse dns lookup on cloudflare
Somehow Cloudflare is hiding the real ip of my server. Is there a possibility to check other domains on my ip by reverse DNS?
in short I make
dig some-server-name.com
I got in reply some A records......
0
votes
0
answers
853
views
Reverse DNS does not contain the hostname and RDNS_NONE from spam assasing
So i am trying to setup the reverse dns for my server and i got it mapping correctly to my mail domain and i did a test on mail-test but reverse dns failed with: Spam Assasin RDNS_NONE, but on mail ...
0
votes
0
answers
48
views
Cloudflare 522, 525 connection timed out
My website keeps giving 522 connection timeout error. we contacted the cloudflare support team and found that there are some packet loss. because of which we are getting this error.
Can you please ...
0
votes
1
answer
2k
views
https not working for aws load balancer, also cloudflare cname for @ is not working but anything else works
I have a ec2 instance with a loadbalancer. The loadbalancer has an issued ssl certificate, it says it's active. I will post screenshots of all my settings. The site works on http just fine. Just not ...
1
vote
1
answer
3k
views
Hide site's real IP address like Cloudflare does?
I have multiple sites hosted on an Azure VM. So all the domains are pointing to a single IP of that vm.
When someone reverse whois my IP address, he/she could be able to find all the related domains ...
0
votes
3
answers
3k
views
How to use Cloudflare's CDN while we can not change nameservers on WIX
We have a website on WIX (www.example.com). The domain name and name servers are all on WIX. Using the same domain name we have another website (buy.example.com) which is NOT on WIX. The "A ...
0
votes
0
answers
301
views
Apache2 / Cloudflare Error 521
My apache2 server encountered a error: "502 Bad Gateway".
I started using ExpressJS and this happened.
Im doing this because I need to use pug and other backend utilities.
Here is my apache2 ...
0
votes
0
answers
1k
views
How to check AWS cloudfront traffic limit? 504 server error
I have a website that handles ticket selling which opens once a year. Many peoples come to the website at a specific date and time. However, some users received 504 Status Code (Gateway Timeout) from ...
0
votes
0
answers
522
views
Cert-Manager Error Fetching certificate via cloudflare dns01 challenge
I'm trying to create a wildcard cert via cert-manager for my domain.
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: ipa
spec:
# Secret names are always required.
secretName:...
1
vote
0
answers
480
views
Is it possible to conditionally set RemoteIPHeader?
I am using Cloudflare to manage DNS in a staging setup and often switch between "DNS only" and "Proxied" states. I have Apache listening on port 443 which terminates the ssl and ...
0
votes
1
answer
2k
views
How to get Cloudflare SSL to work with IIS website on Azure virtual machine
I have an Azure virtual machine running IIS.
The DNS goes through Cloudflare and I have turned SSL on there.
However, when I visit https://www.reainvite.com.au I get
"This site can’t be ...
0
votes
1
answer
739
views
Is it possible to have the root domain on one web hosting and a sub-domain on another?
I have a shared web-hosting with CompanyA and another shared hosting with CompanyB. I own one domain called example.com. I want to host example.com on CompanyA and sub.example.com on CompanyB. Is this ...
0
votes
0
answers
33
views
CDN SSL Authentication reliablity
I was having SSL on my main domain. which is let say , "example.com" & it only showed lock/HTTPS icon on "example.com" not any subdomain eg. abc.example.com , xyz.example.com ...
0
votes
1
answer
1k
views
Nginx proxy_pass multiple redirects issues
I'm having issues with nginx and 302 redirects to files that are behind multiple redirects.
so I'm trying to proxy this request and get 502 bad gateway.
location /85319
{
proxy_pass https://traffic....
0
votes
1
answer
1k
views
Delegate main domain and part of subdomains to different nameserver
Let's assume I have:
Registered myapp.tld domain with ns.some.tld nameserver set
DigitalOcean droplets:
foo.myapp.tld
bar.myapp.tld
Cloudflare zone for:
myapp.tld
es.myapp.tld
de.myapp.tld
other ...
0
votes
2
answers
2k
views
Extremely High TTFB on Wordpress website - Not dabase or server ... what else could cause it?
I'm running a Wordpress ecommerce website on a dedicated VPS with 4CPUs and 6gb RAM, so resources are not an issue . On top of this I have VestaCP installed, with a Nginx + Apache + Php-FPM server . ...
1
vote
1
answer
1k
views
Show upstream Cloudflare server IP after enabled nginx / set_real_ip_from
I've followed cloudflare doc [1] that enabled set_real_ip_from in order to show original client's IP
My log format is
log_format main '$remote_addr $http_cf_connecting_ip $http_x_forwarded_for
...
0
votes
1
answer
254
views
Site opens in HTTP even though I have defined HTTPS
I have a WordPress site hosted on nginx. I am using Cloudflare reverse proxy and SSL. I have setup so site will only open in https and even if someone uses http then it will be redirected to https ...
1
vote
0
answers
343
views
Cloudflare blocks our "between subdomains" url rewrites with a 403 due to X-ORIGINAL-URL header(CVE-2018-14773)
Question: How to remove the X-ORIGINAL-URL header in Azure ARR?
Cloudflare blocks our "between subdomains" url rewrites with a 403 due to X-ORIGINAL-URL header (CVE-2018-14773).
We are using ...
1
vote
1
answer
49
views
Can I write server IP instead of DNS when changing nameservers
My website is currently using CloudFlare reverse proxy. In my nameservers I have defined DNS provided by CloudFlare. I am having some issue with CloudFlare so want to test it by removing reverse proxy....
0
votes
1
answer
51
views
Cloudflare prohibits API GET request
I am having a trouble with my API's GET request. I settled cloudflare as a firewall for my web application. Behind it, my web application is working on Nginx server. All HTTP Requests are working for ...
0
votes
1
answer
585
views
Nginx reverse dns with cloudflare
https://www.nginx.com/resources/wiki/modules/rdns/
https://github.com/flant/nginx-http-rdns
How do you get the nginx-http-rdns module to work with cloudflare free DDoS protection? I wish to use this ...
-1
votes
1
answer
2k
views
Forward SSH from Reverse Proxy Server through VPN to Home Server
I'm trying to set up GitLab on my home server. HTTPS is working and I can get to GitLab's interface, but SSH is not and thus I can't push code to the server.
Here is the setup:
Cloudflare <--> ...
0
votes
0
answers
613
views
Nginx/Cloudflare can I proxy using server block instead of DNS
I am running into slightly annoying issues setting up Cloudflare's custom error page functionality, so I would like to figure out how I can proxy_pass to cloudflare only when my server does not return ...
2
votes
3
answers
9k
views
Configuring SMTP through Cloudflare
My domain registrar is Cloudflare and my site is hosted through A2 Hosting. My problem is that my email worked fine when A2 Hosting was my domain registrar and web host. Now, neither Thunderbird or ...
0
votes
1
answer
192
views
Does CDN defeat the purpose of server-level GeoIP blocking?
Looking for second opinions.
Suppose a website is set up so that only IPs from country X are allowed read/write access. This server goes through a CDN such as Cloudflare. Because the GeoIP block is at ...
12
votes
1
answer
15k
views
Adding CloudFlare to S3 bucket
I have an Amazon S3 bucket that contains thousands of JPGs and similar media assets. (It's the storage for my forums.) I don't host a static site in this bucket (no HTML of any kind) and it's ...