Questions tagged [cloudflare]

CloudFlare is a content delivery network and distributed domain name server service marketed as improving website performance and speed and providing security.

513 questions
3
votes
2 answers

Using CDN like Cloudflare with mod_rewrite to save bandwidth

I know CDNs like Cloudflare save bandwidth by caching static files as images, JS, and CSS files. I have a script that generates images on the fly and its location looks something like this: http://domain.com/image.php?id=1 With id being the image…
Michael Samuel
  • 175
  • 1
  • 7
3
votes
1 answer

Impossible to serve WebP images using CloudFlare?

I want to optimize some images on my site using WebP format. Webp images are highly compressed jpegs and pngs with the help of algorithm developed in Google. However, webp images can be displayed only in modern Chrome and Opera. If browser supports…
yivo
  • 151
  • 5
3
votes
2 answers

Cloudflare SSL - CACert cert file?

I have decided to generate SSL for IIS. I have own CSR and private key. The SSL generated by CloudFlare is in pcks7 format. I would like to to combine it into one pfx formate in order to import it in iis. I used to work with Start SSL certificate…
pwas
  • 177
  • 2
  • 10
3
votes
1 answer

What is the meaning of Server :cloudflare-nginx?

I am trying to see, what is the web-server name of a particular website. http://browserspy.dk/webserver.php When I searched I got response as Server: cloudflare-nginx I know nginx and cloud-flare but I never heard a web-server named…
mahen3d
  • 3,905
  • 12
  • 34
  • 55
3
votes
1 answer

How to log clients' real IPs when using CloudFlare + Nginx + Apache

I've been stuck for days trying to solve this problem, I hope someone can help me with this. I have Nginx stands as a reverse proxy in front of Apache. I'm able to log clients' real IPs by using mod_rpaf module when using Nginx + Apache only without…
Mina Hafzalla
  • 253
  • 4
  • 13
3
votes
2 answers

Nginx ip_hash behind proxy (Cloudflare)

We use nginx for our load balancing, and we need ip_hash to guarantee our server work fine. When we started using cloudflare, most our requests go for one server as it seems all of them are identified only by cloudflare's IP. We would like to…
digao_mb
  • 145
  • 4
3
votes
2 answers

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) With proper nginx modules, I am able to obtain the…
Andy
  • 161
  • 6
3
votes
3 answers

Is it sensible to use both pagespeed and cloudflare?

We're using google's pagespeed service. From what I can gather it just draws the page from our webserver and runs it through the mod_pagespeed optimisation module. I'm wondering does it do any proxy/caching as well, or is it strictly one request…
John Mee
  • 2,298
  • 1
  • 23
  • 27
3
votes
2 answers

CloudFlare CDN and static site with root on Amazon S3

I've set up an S3 bucket to host my static site. Now I am trying to wrap CloudFlare around this, but I get the following warning when adding a CNAME entry for the root domain in CloudFlare's DNS manager: CNAME example.com …
3
votes
1 answer

iptables - drop all HTTP(S) traffic but from CloudFlare

I would like to allow only HTTP(S) traffic coming from CloudFlare. In that way attackers cannot attack the server directly. I know CloudFlare is not mainly a DDoS mitigator, but I would like to try it either way. I'm currently only having access to…
Martin
  • 177
  • 2
  • 10
3
votes
2 answers

iptables with Cloudflare

I'm using fail2ban to block web vulnerability scanners. It is working correctly when visiting the site if CloudFlare is bypassed, but a user can still access it if going through it. I have mod_cloudflare installed. Is it possible to block users…
3
votes
3 answers

Only allowing traffic from Cloudflare

I am new to Linux System Administration and I am experimenting with iptables trying to learn how to really lock down a system with them. And one thing a friend of mine recommended was that there was a way to pass all incoming traffic through…
Nick
  • 31
  • 1
  • 2
3
votes
2 answers

CloudFlare offers DNS root CNAMEs. Any resolution gotchas to be aware of?

I'm not that familiar with the inner workings of DNS, preferring to just add my CNAMEs and A records as appropriate, and leave the behind the scenes to other services. I host a few sites on Amazon S3, which clearly doesn't allow you to have an A…
jvc26
  • 143
  • 6
3
votes
2 answers

How does CloudFlare protect a web site?

I am a little confused about the protection CloudFlare offers. I am directing the www subdomain through CloudFlare with an Orange Cloud, and another subdomain (let's say direct) with a Grey Cloud. But when I tracert to www.example.com or…
3
votes
1 answer

Iptables list doesn't persist across restarts

I am trying to white list CloudFlare's IP addresses on my server by issuing these: iptables -N whitelist iptables -A whitelist -s 204.93.177.0/24 -j ACCEPT iptables -A whitelist -s 199.27.128.0/21 -j ACCEPT iptables -A whitelist -s 173.245.48.0/20…