Cloudflare DNS & Cloudflared Tunnel for

๐Ÿ’ก Cloudflare DNS & Cloudflared Tunnel for โ€” Executive Summary

Technical architectural analysis, practical configuration manifests, and deployment instructions for Cloudflare DNS & Cloudflared Tunnel for.

References and Guidelines (NOTE)

Required and recommended elements from URL purchase to application routing are indicated in *red

Impliments
Links

Godaddy

*Godaddy Domain Purchase
  1. Purchase a domain
Feature: Add forwarding from Godaddy (if not using Cloudflare)

Cloudflare Dashboard

*Move to Cloudflare
*1. Change from Godaddy to Cloudflare name servers
bash
archer.ns.cloudflare.com
lisa.ns.cloudflare.com
Verify DNSSEC
References and Guidelines (NOTE)

If DNSSEC is turned on, Cloudflare may have problems reading Godaddy DNS. It is recommended that you turn off DNSSEC in Godaddy and then activate it in Cloudflare.

*2. Register a domain with Cloudflare

*HTTPS settings
*Edge certificate settings
  • Always use HTTPS ON
  • nextcloud There was an issue with client authentication, so offprocessed
  • Domain filtering can be done by applying rules, but since detailed functional restrictions are not known, only the settings below are maintained.
  • Automatic HTTPS rewrite ON
  • Redirect http://:80 request to https://:443
Email routing
Add subdomain
Routing settings
DNS settings
Enable DNSSEC
Feature: Using Github Pages custom domain
  1. When registering a Github Pages custom domain, a CNAME file is created at the top of the repository. If Actions are not automatically created when using them, you can register them yourself

  2. Access to the dashboard of a DNS provider such as Cloudflare and register DNS records

References and Guidelines (NOTE)

To use both IPv4 and IPv6, just add both A and AAAA.

IPv4: To create an A record, specify your Apex domain as the IP address of your GitHub page.

txt
185.199.108.153
   185.199.109.153
   185.199.110.153
   185.199.111.153

IPv6: To create an AAAA record, specify your Apex domain as the IP address of your GitHub page.

txt
2606:50c0:8000::153
   2606:50c0:8001::153
   2606:50c0:8002::153
   2606:50c0:8003::153
Security Settings
bot

Cloudflare โ€“ Zero Trust (Cloudflare One Dashboard)

*Application Routing settings
*Purchase Zero Trust free plan and move to dashboard
*Network Settings โ€“ Tunnel
  1. Create

  2. When installing the connector within the server, Status INVICTED โ†’ HEALTHY changed

  3. sudo cloudflared service install $token
  4. Register public hostname
Personal settings โ€“ AuthN registration
  • Not required
Access โ€“ Application registration
  • Not required
Root CA Certificate Management

Using Terraform

Related pages
Token and authentication method management
  • zone id & account id

  • You can check zone_id and account_id in the overview.

  • Click on the Import API Token link below to go to the token management screen
  • token management

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *