Questions tagged [cloudflare]
CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.
584
questions
0
votes
1
answer
80
views
Mailing server not receiving incoming-emails sent by addresses outside of my domain
I am using a shared hosting service (iFastNet) to host my website (https://ender.ing/). I was able to get my mailing system to work just fine when I set my DNS records to point to the shared hosting ...
- 1
0
votes
0
answers
60
views
Nginx proxy_pass randomally get timeout error when proxying to same machine through outside server
Disclaimer- I already asked this question in cloudflare forums but after some digging I'm realizing it's more of an nginx issue.
I have example.com domain which runs through cloudflare, and sits at 12....
- 101
0
votes
0
answers
23
views
How to handle CNAME requirement for zone apex DNS record in AWS Route53 and Cloudflare
It is not possible to create a CNAME for the apex zone in Route53 - it violates RFC. Route53 provides for an ALIAS record, but this record has to point to another AWS service and is not capable of ...
- 3,860
0
votes
1
answer
46
views
Server works over IP with port but not domain and port
I have plugged CloudFlare to my server and redirected domain to its' nameservers.
The default domain sends the typical "Server Down" website from CloudFlare - which is fine, because I have ...
- 3
0
votes
0
answers
124
views
Cloudflare WARP not allowing telnet to 127.0.0.1 3306
I've recently started having issues with cloudflare WARP. I have the following setup.
Ubuntu 22.04
Cloudflare-warp Version: 2024.2.62-1
Docker: 1.5-2
When I connect to warp I have no problem accessing ...
- 1
0
votes
0
answers
58
views
SSL certificates and firewall blacklists
We have a domain, erbaharlab.com, which we have bought for our research group.
www.erbaharlab.com contains our research group website, nanospacejm2.erbaharlab.com contains a conference website and ...
- 101
0
votes
0
answers
57
views
Putting a Django application into production on Ubuntu server with Apache2 and Cloudflare
I have this Django application which works very well, but I do not understand at all, how to put it in production on a Ubuntu 22.04 LTS server using apache2 and to link it in HTTPS, on a domain such ...
- 11
1
vote
1
answer
118
views
Blocked IP on CloudFlare keeps connecting and attacking server
I have a NodeJS server with HTTPS and certificates. The DNS is on CloudFlare.
The host receives a connection every day at 3:32am from 3.8.236.120, an AWS host in the UK. The crawler launches requests ...
- 269
0
votes
2
answers
105
views
How to Tune Virtualmin Website for High Traffic? (Alt: How to defend against DoS?)
I have a website running on PHP-FPM/Nginx/MariaDB, hosted through Virtualmin on an 8GB RAM, 4 core Xeon 3.1ghz CPU, hidden behind Cloudflare.
Recently, we've had a number of simple DoS attacks, a ...
- 1
1
vote
1
answer
62
views
How to best disable DNSSEC before onboarding to CloudFlare?
In order to avoid offline time for for a DK domain when onboarding them to CloudFlare, I have read this regarding disabling DNSSEC: https://developers.cloudflare.com/dns/dnssec/
Where is says:
If you ...
- 281
1
vote
0
answers
52
views
Is it possible to put http torrent tracker (XBT) behind cloudflare tunnel
Similar question in this thread
Is it possible to put http torrent tracker under CDN to prevent DDOS?
basically xbt works on port 7210 (by default) and if I do redirect with tunnel, I lose IP address ...
- 11
0
votes
1
answer
91
views
How can I force web request to resolve to external DNS
We are using a split DNS for traffic for our primary domain - external traffic goes to Cloudflare, and internal traffic goes to our windows server DNS, for security reasons. However, for our primary ...
- 133
0
votes
1
answer
47
views
how to setup failover network with docker on synology
I have one synology nas with 2 nic and I have two different internet connect from 2 different ISP. and I am using cloudflare zero trust service in my docker on synology.
that nas server nics connect ...
- 1
0
votes
0
answers
40
views
Howto add ipv6 to remoteip.conf
I'm trying to apply these configurations to my apache2 web server with the help of Cloudflare original documentation here. In the 4th step it says;
Define trusted proxy addresses by creating /etc/...
- 135
0
votes
1
answer
76
views
Is it possible to bind a port with HTTPS in nginx
I have a graphql api that works when accessed with http://example.com:4001/graphql but does not work with https://example.com:4001/graphql which is obvious as https takes the port 443 and here I am ...
0
votes
0
answers
162
views
Cloudflare edge certificates stuck on pending validation because of DNSSEC
I’ve added my domain to cloudflare around 15 hours ago and edge certificates is still stuck on pending.
I tried the help center and the answer I got was to test my website with https://letsdebug.net/ ...
3
votes
0
answers
131
views
How to investigate 100% CPU load for 15 minutes on random days
"I have a server that runs a website on Apache2 and is behind Cloudflare. The server's normal load, according to 'htop', is 10%. However, at random days/times, the server load spikes up to 100%, ...
- 141
0
votes
1
answer
44
views
Specifying IP Address for DNS Migration to Cloudflare
I am currently in the process of migrating my DNS to Cloudflare, and I've encountered a bit of a snag that I hope some of you might be able to assist me with.
I am managing a domain registered in ...
- 101
-1
votes
2
answers
94
views
Configuring Cloudflare DNS for Office 365 to Maintain Separate Mailboxes on sitground.com
I have a web application on the site siteground.com, associated with the domain adward.com. I used microsoft365.com as the mail service. On siteground.com, there is a mailbox, for example (job.adward....
- 1
0
votes
0
answers
18
views
AWS instance when self-hosted via cloudlfare is stuck on the login page,when logged in,it just deauthenticates and returns to the login
I am hosting an AWS instance and running filecloud on it.It works perfectly when accessed with the public IPv4 DNS.I added a CNAME record on cloudflare to connect it to my personal domain. When ...
- 1
0
votes
0
answers
64
views
Cloud Flare Certificate - Origin server NET::ERR_CERT_AUTHORITY_INVALID
I've a private container registry, thats exposed with a dns proxied with CloudFlare.
So far everything was working fine, now we are migrating our services devops to github actions and while I try to ...
- 101
0
votes
0
answers
359
views
Forwarding traffic from OpenVPN through Cloudflare WARP
I have an Ubuntu 22 node, and I'm trying new ideas to implement using Cloudflare WARP.
Let's say I want to have an OpenVPN server running on the node, while Cloudflare WARP is installed and connected. ...
0
votes
0
answers
70
views
Vaultwarden hardening
I’ve been to harden my security around the vaultwarden instance and currently unable to get the iptables working. The ban on Cloudflares side is working fine, although for some reason the iptables ...
0
votes
1
answer
235
views
Cloudflare Origin Server Exposing IP with DNS Only SRV Record
I have a domain registered with Cloudflare with an associated A record which point to the IP of my server (origin server), as well as an A record for a subdomain (service1.example.com) for a TCP ...
0
votes
1
answer
85
views
Weird 301-redirect to http from https only happening with CF as proxy on /wp-admin on www subdomain
I have a wordpress blog on an EC2 instance on AWS using the AMI image aws-marketplace/bitnami-wordpress-6.3.2-6-r09-linux-debian-11-x86_64-hvm-ebs-nami-7d426cb7-9522-4dd7-a56b-55dd8cc1c8d0
In ...
0
votes
1
answer
194
views
DigitalOcean Loadbalancer and Cloudflare DNS
I have moodle instances on DigitalOcean, that connect to one load balancer instances (DigitalOcean load-balancer).
I'd like to use Cloudflare DNS with a proxy and point it to my load-balancer's IP ...
0
votes
2
answers
250
views
Nginx Server Block Configuration Issue - Conflicting Domains
I have a clean installation of Nginx, specifically version 1.24.0, on my Amazon Linux 2023 server, and I'm facing an issue with the server block configuration. I have three server blocks set up for ...
- 101
0
votes
0
answers
34
views
Is Cloudflare a good option in this case and if so, how set up it?
I need to make a small (courses) platform where users aren't supposed to download the videos.
Is pass the media through CloudFlare a good way to prevent those downloads at least make harder? if not, ...
- 1
0
votes
0
answers
116
views
Kubernetes Dashboard (from Helm chart) behind Cloudflare Tunnel - How to fix TLS bad certificate error?
I have successfully installed cloudflared in my K3s cluster and am running a bunch of services through several subdomains that point to the tunnel. That works like a charm.
Now I would like to create ...
- 151
0
votes
1
answer
25
views
ssl_issuer_unknown when connecting only to a certain <VirtualHost> with apache
I've this problem with my site configuration and ssl certificates. I've got two websites on the same machine running two different domains. Their respective ssl certificate is issued by Cloudflare and ...
0
votes
0
answers
67
views
Cloudflare is able to fetch all my domain CNAME
Today, I was in the process of setting up an account with Cloudflare (the free tier). During the setup, it asked for the domain I wanted to configure. When I introduced my domain, and without making ...
- 101
0
votes
0
answers
111
views
cannot ping 8.8.8.8 with tailscale started
We have been using tailscale for several years now without too many issues.
I have a user whose device cannot ping 8.8.8.8 when tailscale is started. There are no tailscale exit nodes involved and the ...
- 253
0
votes
0
answers
12
views
Understand wrong data shown on the e-commerce. Cloudflare - FrontDoor and Multiple Azure AppService instance
I've recently migrated a VM that was hosting an Asp.NET MVC application + Wordpress blog on a separate AppService for MVC + another one for Wordpress.
We have now this configuration:
Cloudflare for ...
- 99
0
votes
0
answers
76
views
Mask Url from path to subdomain using NGINX
I want to achieve url rewrite as such:
https://documentation.domain.com/login to https://app.domain.com/login
https://api.domain.com/login to https://app.domain.com/login
, any sudomain with url {...
0
votes
0
answers
143
views
NGINX Rewrite path to subdomain with cloudflare results in Too many redirects
I want to achieve url rewrite as such:
https://documentation.domain.com/login to https://app.domain.com/login
https://api.domain.com/login to https://app.domain.com/login
, any sudomain with url {...
0
votes
0
answers
166
views
Using IIS HTTPS Rewrite with Cloudflare?
I have an IIS (10.0) server (2019) running a .NET application.
I'm using cloudflare for DNS/SSL and have the option to have CF enforce SSL. This works fine if im using the DNS name of the app, ex http:...
- 121
0
votes
0
answers
38
views
Site redirection of recently acquired domains works fine from external network but fails inside internal network
We have recently acquired 04 domains and configured 301 site redirection for those sites to our company site and it works fine from external network. However, the redirection doesn't work from inside ...
- 1
0
votes
0
answers
261
views
Configure Keep Alive for connections coming from Cloudflare
I have two servers, an NGINX load balancer that receives connections from Cloudflare and two Apache applications that receive requests forwarded by NGINX.
[Cloudflare] → [NGINX] → [Apache 01/Apache 02]...
- 289
0
votes
0
answers
233
views
Route certain domains through cloudflare warp and all other traffic go through the default WAN interface
I'm new to this subject. I have a ubuntu installed vps and vnc server on it. I want to use cloudflare warp only for selected domains/subdomains and all other traffic go through the default WAN ...
- 1
0
votes
1
answer
339
views
Clients of a site are getting SSL_ERROR_HANDSHAKE_FAILURE_ALERT (Firefox) and ERR_BAD_SSL_CLIENT_AUTH_CERT (Chrome)
I'm running a site in AlmaLinux 8.8 (Centos) and Apache 2.4.56.
The site has a self-signed certificate.
When I access the site, I get the usual warning due to the self-signed certificate. After ...
- 101
1
vote
1
answer
749
views
Session Continually Times out when Accessing SuperMicro IPMI via Cloudflare Tunnel
I have a SuperMicro X12dpi-N6 motherboard system that is currently running Ubuntu 22.04 Server. In order to support remote maintenance, I configured a cloudflare tunnel that would allow me to access ...
- 111
0
votes
0
answers
218
views
How to configure Cloudflare DNS for path based routes with a target like how you define for a CNAME record?
I have a site, lets call it mydomain.com. The site has some subdomains (subdomain.mydomain.com) and some path based routing (mydomain.com/path1). The thing is that when a user clicks on links to ...
- 101
0
votes
0
answers
136
views
Unable to access web server via Cloudflare after configuring EC2 security groups
I have an EC2 instance running a web server (NGINX), and I'm trying to set up authentication via Cloudflare. Here's what I've done:
Added a security group to the EC2 instances with an inbound rule ...
- 101
1
vote
0
answers
126
views
Cloudflare DNS Resolution
DNS newbie here trying to understand the DNS setup for one of our domains.
Will call it example.com.
So the DNS host is Azure DNS. And there is an A record in Azure that points to a Cloudflare server ...
- 11
0
votes
2
answers
626
views
Receiving TLS 1.0 and 1.1 from server despite disabling it in the registry and disabling FIPS compliant algorithms
Windows Server 2019 with IIS 10.
Used these scripts to disable TLS 1.0 and 1.1
New-Item -path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server'
-Force `
| ...
- 105
1
vote
0
answers
846
views
Windows RDP behind NAT, with Cloudflare Tunnel
My internet connection is behind NAT, which makes it impossible to serve anything outside (security cameras, file servers, ecc)
I'm trying CloudFlare Zero Trust Tunnel to bypass it, and it seems to ...
- 111
0
votes
0
answers
85
views
Match traffic based on port with Cloudflare Tunnel
I am currently setting up Cloudflare tunnels for testing. I have a working tunnel setup on my origin server that is running nginx as a reverse proxy with a number of hostnames each having 2 distinct ...
- 573
0
votes
0
answers
262
views
Reverse Proxy Issue: WordPress Admin Redirects and Incorrect Static Content Serving
I have a configuration issue with my website setup involving a reverse proxy and WordPress. Currently, I have two domains: example.com hosted on server A and example.net hosted on server B. To display ...
- 101
0
votes
0
answers
310
views
Use custom SNI for Cloudflare
I have an app back-end on a server it has many users in China and it uses websocket, I'm doing some tests to bypass GFW's blockage of SNI, we can connect to Cloudflare Websocket websites in China, but ...
- 173
1
vote
1
answer
2k
views
reverse proxy for subdirectory on another server with wordpress for blog
I have a website and it's working now as
https://example.com
Now I want to load my blog as a subdirectory but on another server, it should be loaded as
https://example.com/blog
I am using nginx ...
- 11