Questions tagged [cloudflare]

CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

567 questions
3
votes
1 answer

Cloudflare: HSTS (Strict-Transport-Security) for subdomain only

I would like Cloudflare to send the HSTS header on the main domain, and on the www subdomain, but not the other subdomains. However I can only enable HSTS for the primary domain (and add includesubdomains, which I can't use because I don't want HSTS…
user643011
  • 139
  • 1
  • 10
3
votes
0 answers

How to I point Cloudflare to my ELB on Amazon?

I'm trying to point Cloudflare to my ELB on Amazon, but haven't found any good information about how to do this. The closest I found is this page:…
valter
  • 699
  • 5
  • 13
  • 23
3
votes
1 answer

getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH on nginx webserver via cloudflare

I have a docker infrastructure consisting of 1 nginx reverse proxy 1 nginx web server 1 php7.0 fpm server both the nginx reverse proxy and webserver are using the same docker image but just loaded with different site confs. On the reverse proxy it…
user618509
  • 151
  • 2
  • 9
3
votes
2 answers

Using CDN like Cloudflare with mod_rewrite to save bandwidth

I know CDNs like Cloudflare save bandwidth by caching static files as images, JS, and CSS files. I have a script that generates images on the fly and its location looks something like this: http://domain.com/image.php?id=1 With id being the image…
Michael Samuel
  • 175
  • 1
  • 7
3
votes
1 answer

Impossible to serve WebP images using CloudFlare?

I want to optimize some images on my site using WebP format. Webp images are highly compressed jpegs and pngs with the help of algorithm developed in Google. However, webp images can be displayed only in modern Chrome and Opera. If browser supports…
yivo
  • 151
  • 5
3
votes
2 answers

Cloudflare SSL - CACert cert file?

I have decided to generate SSL for IIS. I have own CSR and private key. The SSL generated by CloudFlare is in pcks7 format. I would like to to combine it into one pfx formate in order to import it in iis. I used to work with Start SSL certificate…
pwas
  • 177
  • 2
  • 10
3
votes
1 answer

What is the meaning of Server :cloudflare-nginx?

I am trying to see, what is the web-server name of a particular website. http://browserspy.dk/webserver.php When I searched I got response as Server: cloudflare-nginx I know nginx and cloud-flare but I never heard a web-server named…
mahen3d
  • 4,342
  • 14
  • 36
  • 57
3
votes
1 answer

How to log clients' real IPs when using CloudFlare + Nginx + Apache

I've been stuck for days trying to solve this problem, I hope someone can help me with this. I have Nginx stands as a reverse proxy in front of Apache. I'm able to log clients' real IPs by using mod_rpaf module when using Nginx + Apache only without…
Mina Hafzalla
  • 253
  • 2
  • 4
  • 13
3
votes
1 answer

Getting a [550 5.1.1 Recipient not found] (Can't receive email) with CloudFlare

I'm having troubles with my email account. I'm using GoDaddy's Email service and the domains that are not connected to CloudFlare are operating just fine. The problem comes in with the domains that I connect to CloudFlare, tried to get email from…
Ricardo
  • 161
  • 1
  • 3
3
votes
2 answers

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) With proper nginx modules, I am able to obtain the…
Andy
  • 161
  • 6
3
votes
3 answers

Is it sensible to use both pagespeed and cloudflare?

We're using google's pagespeed service. From what I can gather it just draws the page from our webserver and runs it through the mod_pagespeed optimisation module. I'm wondering does it do any proxy/caching as well, or is it strictly one request…
John Mee
  • 2,548
  • 1
  • 24
  • 27
3
votes
2 answers

CloudFlare CDN and static site with root on Amazon S3

I've set up an S3 bucket to host my static site. Now I am trying to wrap CloudFlare around this, but I get the following warning when adding a CNAME entry for the root domain in CloudFlare's DNS manager: CNAME example.com …
3
votes
1 answer

iptables - drop all HTTP(S) traffic but from CloudFlare

I would like to allow only HTTP(S) traffic coming from CloudFlare. In that way attackers cannot attack the server directly. I know CloudFlare is not mainly a DDoS mitigator, but I would like to try it either way. I'm currently only having access to…
Martin
  • 177
  • 2
  • 10
3
votes
2 answers

iptables with Cloudflare

I'm using fail2ban to block web vulnerability scanners. It is working correctly when visiting the site if CloudFlare is bypassed, but a user can still access it if going through it. I have mod_cloudflare installed. Is it possible to block users…
3
votes
3 answers

Only allowing traffic from Cloudflare

I am new to Linux System Administration and I am experimenting with iptables trying to learn how to really lock down a system with them. And one thing a friend of mine recommended was that there was a way to pass all incoming traffic through…
Nick
  • 31
  • 1
  • 2