Anyway to proxy a 80 port web server?

I have a web server running on a 80 port and was wondering if there's anyway to get that proxied so it hides my backend IP. Does anyone have any ideas here?

SomeoneOP•9/3/24, 8:30 PM

Proxying directly on Cloudflare DNS seems to break it entirely... gives me the error in the screenshot.

SomeoneOP•9/3/24, 8:31 PM

If I have it set as not proxied and DNS only, it works fine.

SSomeone Proxying directly on Cloudflare DNS seems to break it entirely... gives me the e...

Chaika•9/3/24, 8:48 PM

So 80/http only, no https? Under SSL/TLS -> Overview change your SSL to Off if that's the only website on the domain, or you can use a Configuration Rule with Hostname eq to override it

Chaika•9/3/24, 8:49 PM

If you're not doing https/443 because certs are annoying to setup or something like that, you could use Cloudflare Tunnels, simple connector you install on the same server/network, and then
User -> Encrypted -> CF -> Encrypted -> Tunnel -> unencrypted but LAN or same machine -> origin host, to avoid any security issues

CChaika So 80/http only, no https? Under SSL/TLS -> Overview change your SSL to Off if t...

SomeoneOP•9/3/24, 8:50 PM

It does have SSL if that changes anything

SomeoneOP•9/3/24, 8:50 PM

I suppose 443 port too then

Chaika•9/3/24, 8:51 PM

It changes a lot yea, should be 80 & 443 then if properly setup. Does it work without proxy?

CChaika It changes a lot yea, should be 80 & 443 then if properly setup. Does it work wi...

SomeoneOP•9/3/24, 8:51 PM

Yep! Works fine without proxy

SomeoneOP•9/3/24, 8:51 PM

Just want to hide that backend IP, this is the final obstacle before everything is hidden hahaha

Chaika•9/3/24, 8:51 PM

Works fine with https or http without proxy?

CChaika Works fine with https or http without proxy?

SomeoneOP•9/3/24, 8:52 PM

With https, yeah

SomeoneOP•9/3/24, 8:52 PM

and http, but directs to https

Chaika•9/3/24, 8:52 PM

If you go to SSL/TLS -> Overview, what's your setting?

SomeoneOP•9/3/24, 8:52 PM

Flexible

Chaika•9/3/24, 8:52 PM

go to Full (Strict)

SomeoneOP•9/3/24, 8:52 PM

Awesome, that's done

Chaika•9/3/24, 8:52 PM

Flexible is not something that should ever be used, it's user -> https -> cf -> http (plaintext!!) -> origin

Chaika•9/3/24, 8:53 PM

looks like you unproxied it?

SomeoneOP•9/3/24, 8:53 PM

annnnd it seems like it's working now!

SomeoneOP•9/3/24, 8:53 PM

hahaha thank you so much!

SSomeone annnnd it seems like it's working now!

Chaika•9/3/24, 8:54 PM

I think you're just behind dns cache

SomeoneOP•9/3/24, 8:54 PM

is it not working for you?

SomeoneOP•9/3/24, 8:55 PM

ah rip it's not on my alternate computer

SomeoneOP•9/3/24, 8:55 PM

Chaika•9/3/24, 8:55 PM

yup, run a trace (account level option -> trace) and see what it hits with the url

https://bans.nekobox.es/

https://bans.nekobox.es/

Chaika•9/3/24, 8:55 PM

Magic Link: https://dash.cloudflare.com/?to=/:account/trace/search

SomeoneOP•9/3/24, 8:56 PM

Send a screenshot here?

SomeoneOP•9/3/24, 8:56 PM

Chaika•9/3/24, 8:57 PM

yup, what's that origin rule?

SomeoneOP•9/3/24, 8:58 PM

SomeoneOP•9/3/24, 8:58 PM

basically a reverse proxy

Chaika•9/3/24, 8:58 PM

ok so that's making all requests for all hostnames on your zone/website go user -> http/443 -> cf -> https/25574

SomeoneOP•9/3/24, 8:58 PM

Chaika•9/3/24, 8:58 PM

what were you trying to accomplish with that?

Chaika•9/3/24, 8:58 PM

Is it something that should be more scoped to a specific subdomain, orr

SomeoneOP•9/3/24, 8:59 PM

redirect linking.nekobox.es to the web server with 25574

Chaika•9/3/24, 8:59 PM

click "Custom Filter Expression" "Hostname" "eq" "linking.nekobox.es"

Chaika•9/3/24, 9:00 PM

side note: we may have broke that subdomain when we switched ssl/tls, you should really have proper ssl/tls at your origin though. If you need an ssl cert, CF offers 15 year long ones under SSL/TLS -> Origin Server, or Cloudflare Tunnels are really easy secure setup

Zach•9/3/24, 9:00 PM

just so u guys know u have issues w the linking subdomain too

Chaika•9/3/24, 9:00 PM

yea that's what I just said above lol, although if it was working just because of Flexible that's not really working/zero security

CChaika click "Custom Filter Expression" "Hostname" "eq" "linking.nekobox.es"

SomeoneOP•9/3/24, 9:10 PM

What does

eq

eq

mean here?

SomeoneOP•9/3/24, 9:10 PM

equal?

Chaika•9/3/24, 9:10 PM

equals

SomeoneOP•9/3/24, 9:10 PM

amazing, just did that

Chaika•9/3/24, 9:10 PM

oh sorry yea the dashboard doesn't say that only the underlying expression language

SomeoneOP•9/3/24, 9:11 PM

any other steps i should do regarding the DNS settings?

SomeoneOP•9/3/24, 9:11 PM

keep

linking

linking

as proxied on DNS?

Chaika•9/3/24, 9:13 PM

if you want to hide both yea both should be proxied, see Anyway to proxy a 80 port web server? about fixing its ssl tho

CChaika side note: we may have broke that subdomain when we switched ssl/tls, you should...

SomeoneOP•9/3/24, 9:17 PM

Using the origin server, could you walk me through how to do that?

SomeoneOP•9/3/24, 9:17 PM

either one works, not too advanced in the DNS stuff yet hahaha

Anyway to proxy a 80 port web server?

Similar Threads

Similar Threads

Similar Threads