松鼠の文档

# CloudFlare

CloudFlare (opens new window) is a reverse proxy that is widely used to speed up and add security to websites.

# Setup CloudFlare

Go to create an account (opens new window) and follow the steps. You will need to do some changes to your website DNS so be aware of that. Some hosting companies have partnerships with CloudFlare so in those cases you can enable CloudFlare directly from your hosting account.

# Real connecting IP

CloudFlare is a proxy, so it is required to pass the real peer IP to your webserver, otherwise the registered IPs will match CloudFlare and not the end-user. For Nginx, you must use ngx_http_realip_module. For Apache, mod_remoteip.

Kindly read the CloudFlare documentation (opens new window) regarding this. If you run Nginx, we recommend to check this repository: ergin/nginx-cloudflare-real-ip (opens new window).

# CloudFlare HTTPS

CloudFlare offers a wide range of HTTPS solutions that allows you to easily turn on/off SSL on your website. Depending on what kind of certificate you want to handle they offer "Flexible" and "Full" SSL variations. To enable HTTPS follow these steps:

  • Go to your websites (opens new window)
  • Click on the gear icon and select "CloudFlare settings"
  • Scroll down to the SSL section and select your configuration

# How do I force my site to only use HTTPS/SSL?

By default CloudFlare HTTPS doesn't force all the traffic to HTTPS.

To force all traffic to HTTPS, enable the "Always Use HTTPS" feature within the Edge Certificates tab of the Cloudflare "SSL/TLS" page.

If you only want to redirect for a subset of requests, consider creating an “Always use HTTPS” page rule as detailed below:

  • Go to your websites (opens new window)
  • Click on the gear icon and select "Page Rules"
  • Enter your website in the URL pattern input
  • Toggle the "Always use HTTPS" switch
  • Click on "Add rule" at the bottom

By doing this all the traffic of your website will use HTTPS. When someone access your website using HTTP, CloudFlare will redirect those request to HTTPS.

# More help

Visit CloudFlare Support (opens new window) if you need more help. You can also contact Chevereto support (opens new window) if you need anything.

← ShareX →