Cloudflare Developers•3y ago

Take a bit and do some research on your own. https://support.forpsi.com/kb/a3279/dnssec.aspx

Rrdm Take a bit and do some research on your own. https://support.forpsi.com/kb/a327...

DaniFoldi•3/3/23, 10:14 PM

I've seen forpsi's docs before, but elimintating the risk of attacks on a webpage with DNSSEC is... strange let's say

rdmOP•3/3/23, 10:14 PM

Let me see if I have a domain that I haven't enabled DNSSec.. I can try to give you a simple overview, but, I won't know exact steps for your registrar.

Original message was deleted

rdmOP•3/3/23, 10:16 PM

One sec, I'll see if I can give you some general direction. I just need to find a domain in my account that I haven't enabled it for.

Original message was deleted

rdmOP•3/3/23, 10:20 PM

So at it's most basic. The process 1) Starts in Cloudflare. You'll go DNS > DNS Settings. Enable DNSSec.

Cloudflare will then give you the "DS Record" that you will need to input with your Registrar. Cloudflare will give you the record all in 1, but, then it will break down the information below that.

DS Record = full record
Digest, Digest Type, etc etc, breaks down that record in an easier way for you to view it.

You'll need to plug that into your Registrar. FYI, your registrar may not require each and every one of those values. Which is why it's so difficult for me to give any more specific info.

rdmOP•3/3/23, 10:20 PM

Hopefully that helps get you started.

rdmOP•3/3/23, 10:21 PM

Your registrar's knowledge doesn't give you much to go on. But they say

When you use your own DNS servers for your domains (registered with INTERNET CZ, a.s.), first ask your DNS administrator to create a domain "keyset".

The 'keyset' is what I tried to explain above that you get from Cloudflare's dash.

rdmOP•3/3/23, 10:22 PM

Good luck.

rdmOP•3/3/23, 10:23 PM

No worries, best of luck. It's a bit confusing at first, but, after they tell you where to input those values in their portal, it should be easy for you. You have a great day also! Cheers.

Dave P•3/4/23, 2:55 AM

I’m creating my first Astro project to be deployed on CF Pages. The Astro CF integration isn’t compatible with Astro Image integration — which optimizes image size. My question is will CF Pages optimize the images saved in my project automatically? Or will I need to only use CF images in my project? This might be a stupid question, but I’d like to figure this out. Thanks!

Unsmart•3/4/23, 2:57 AM

astro image should work on static pages but ssr pages you would need to use cf image optimization

UUnsmart astro image should work on static pages but ssr pages you would need to use cf i...

Dave P•3/4/23, 3:09 AM

Yes. Sorry. I should have mentioned that. I’m wanting to use SSR. I have a Pro plan. So would the included Cloudflare Polish take care of the optimization of images saved in the project? Or is it the add-on image resizing? Or would it be easier to just use Cloudflare images?

Unsmart•3/4/23, 3:19 AM

polish is enough

UUnsmart polish is enough

Dave P•3/4/23, 4:09 AM

Thank you.

Cayter•3/4/23, 8:58 AM

does anyone know if there's any cloudflare api provides an account or worker usage which can be used to setup usage/spent alerts or bill different customers/tenants? tried searching on this page https://api.cloudflare.com but can't seem to find it

g000m•3/4/23, 10:36 AM

Creating a cloudflared tunnel appears to get blocked by Warp client. Where can I find the IPs to set in split tunnel to make this work?

Original message was deleted

rdmOP•3/4/23, 12:40 PM

Glad you got it sorted out.

Ddrew7 email workers - great thing, but - how do i: got a gmail free account - to handl...

Hello, I’m Allie!•3/4/23, 12:46 PM

Wait, so you tried to respond to the email routing re-sender?

Ddrew7 gmail could do it, but it whould say to any end-user - this is a account@gmail.c...

Hello, I’m Allie!•3/4/23, 12:49 PM

CF does not currently offer reverse-forwarding services(making account@gmail.com look like alias@domain.gq). You can build something like that yourself with Workers/Mailchannels, but it wouldn't forward emails directly from gmail.

MMarty Does that mean CF WILL offer that at one point?

Hello, I’m Allie!•3/4/23, 12:52 PM

It means that it is a possibility, but I haven't heard anything about it happening

Hello, I’m Allie!•3/4/23, 12:52 PM

It would also be difficult, since then CF would have to deal with IP Reputation, which is a big headache

MMarty Don't they already deal with such things?

Hello, I’m Allie!•3/4/23, 12:56 PM

No, they don't. CF can find unreliable IPs and block them, but keeping CF's own IPs clean is a whole 'nother story.

Hello, I’m Allie!•3/4/23, 12:56 PM

Especially with something as easily abused as emails.

Hello, I’m Allie!•3/4/23, 12:57 PM

If one person starts sending a butt-ton of emails via CF, even if they are paying for it, then email providers begin lowering CF's IP reputation

MMarty That leak the origin ip

Hello, I’m Allie!•3/4/23, 12:57 PM

I mean, that doesn't really help if you pay $5 for an expendable VPS.

Nneatnettech can I setup emails with domain or just routing ?

Hello, I’m Allie!•3/4/23, 3:04 PM

What do you mean?

Pprender its allowed to build a own CDN upon cloudflare by using the dev products r2 , wo...

Hello, I’m Allie!•3/4/23, 3:05 PM

Yes, you are allowed to build a paid product on top of CF(as long as it isn’t video based)

Nneatnettech I would like to have an email address set up, that I could use with my email cli...

Cyb3r-Jak3•3/4/23, 3:10 PM

Cloudflare only offers email routing. You can't login into the email accounts you create

Nneatnettech Oh ok, thanks

Cyb3r-Jak3•3/4/23, 3:11 PM

I believe zoho offers a free plan of 3 accounts if that is what you are looking for

Take a bit and do some research on your own. https://support.forpsi.com/kb/a3279/dnssec.aspx

Similar Threads