Questions tagged [cloudflare]

CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

567 questions
2
votes
3 answers

How do I tell if a site is using CloudFlare reverse proxy services?

I'm investigating the impact of the leak of CloudFlare payload data due to a parser bug on services that we use. It's relatively easy to tell if a service is directing traffic to CloudFlare via DNS: $ nslookup www.authy.com Server: …
rakslice
  • 473
  • 3
  • 11
2
votes
1 answer

nginx redirect without port

I have an issue with 301 redirects in Nginx. It always redirects to a URL with it's local port. Situation is as follows: Site is running through Cloudflare, full https. CF sends http requests to the server where varnish accepts them. Varnish then…
Magio
  • 21
  • 2
2
votes
2 answers

CloudFlare 'Full SSL'

I'm setting up a free cloudflare account and i'm unsure what this means (for Full SSL): "You will need to have an SSL certificate on your server. However, CloudFlare will not attempt to validate the certificate (certificates may be…
wazz
  • 129
  • 3
2
votes
3 answers

Can I use the same SSL certificate on the CDN and the origin

It's pretty straightforward question, I have a certificate issued by DigiCert, already installed it on my origin, and I want to use it for the CDN. I'm starting to configure Akamai CDN in front of my origin, but they say they will purchase a…
MMSs
  • 123
  • 1
  • 6
2
votes
0 answers

Whitelist or disable rate limit of CloudFlare IPs for AWS EC2

I have two AWS EC2 instance in Sydney, serving sites sitting behind CloudFlare. I'm not using ELB. Over the last week I have started seeing CloudFlare serving 522 Timeout errors fairly regularly. CloudFlare support said: Currently there are no…
Josh B
  • 21
  • 3
2
votes
2 answers

How to mitigate DDOS attacks on AWS?

I have web application (NodeJS) and I plan to deploy it to AWS. To minimize the cost it will run on single EC2 instance. I'm worried though about what will happen if someone decides to bless me with DDOS attack and hence have few questions. Now, I…
spirytus
  • 197
  • 2
  • 4
2
votes
1 answer

Custom SSL doesn't show when using CloudFlare

I have an EV certificate from godaddy. It works fine and the green address bar with the name of my company shows up when I use it without cloudflare. However when I change my DNS to cloudflare and turn SSL Strict mode on, the green lock says I have…
2
votes
1 answer

How to connect Amazon EC2 with Cloudflare?

I'm trying to set up Amazon EC2 with Cloudflare for more than one day. I already added all the information NS failover with NS route53 no Cloudflare but nothing works. Someone got success to connect the EC2 with Cloudflare?
2
votes
1 answer

Use HTTP 1.0 in Apache VirtualHost

I would like to use only HTTP 1.0 on a certain VirtualHost in Apache. The reason for doing so is that I use CloudFlare, and my apps requires the Content-Length header in the HTTP response. However, CloudFlare only forwards the Content-Length header…
Pan Ziyue
  • 123
  • 2
  • 6
2
votes
1 answer

Social networks and Cloudflare free SSL

Let me expose my setup and problems. Maybe some of you will have ideas for me to test. Setup On Digital Ocean : I have one web server running a web site with NGINX in the front (Ruby on Rails behind, but I think this is not relevant) I have port…
Hugues
  • 23
  • 2
2
votes
1 answer

Handling POST requests from blocked IP's

I have a malicious user targeting my site, sending a large amount of POST requests. I have automated systems to block abusing IP's however the problem is I am blocking them within my PHP code via a database. So every post request they make, makes a…
ComputerLocus
  • 193
  • 4
  • 12
2
votes
3 answers

Having trouble removing HTTP header "Cache-control"

I'm trying to get my assets cached using Cloudflare Cloudflare states here that "CloudFlare will not cache your site or static content if you have no-cache and private headers coming from your server" As you can see from my file response,…
onassar
  • 223
  • 2
  • 9
2
votes
3 answers

Issue varnish purge through CloudFlare to Varnish

I've been working on this for a while and can't seem to find any solution. I have varnish sitting in front of my nginx server, with CloudFlare sitting in front. When I issue a curl -X PURGE host CloudFlare picks it up and of course denies it with a…
Michael
  • 123
  • 3
2
votes
1 answer

Using Varnish (only) for DDoS mitigation

My VPS is suffering from a (D)DoS doing a SYN flood with spoofed IPs. I'm right now searching from ways how to be able to defend (at least a bit) against it. It's running a DirectAdmin apache2 webserver. Mainly used for serving PHP and MySQL. We…
2
votes
1 answer

Setting an SPF/DKIM record with CloudFlare

What is the correct way to setup an SPF record? Use TXT and add the following? v=spf1 a mx include:mydomain.tld ~all UPDATED: After using the following: v=spf1 a mx ~all I get this: Received-SPF: temperror (google.com: error in processing during…
Tiffany Walker
  • 6,681
  • 14
  • 56
  • 82