Network Protocols

TLS

configure

Configure Your Origin server

// For IPv4 addresses
iptables -I INPUT -p tcp -m multiport --dports http,https -s $ip -j ACCEPT
// For IPv6 addresses
ip6tables -I INPUT -p tcp -m multiport --dports http,https -s $ip -j ACCEPT

Protect your origin server

Secure Origin Connections

a) Proxy records setting up Proxied records, hide the origin IP Addresses and provide DDOS Protection

How Cloudfare acts as proxied DNS

https://developers.cloudflare.com/fundamentals/concepts/how-cloudflare-works https://developers.cloudflare.com/fundamentals/concepts/cloudflare-ip-addresses/

when a website lookup happens in DNS, if proxied is enabled in cloudfare, it returns the anycast IP address, instead of the origin server ip defined in the routing table.

Next

https://developers.cloudflare.com/fundamentals/concepts/how-cloudflare-works#how-cloudflare-works-as-a-reverse-proxy read the load balancing and cdn architecture

DNS Record Types

www.example.com --> FQDN example.com --> Root of a domain news.example.com blog.example.com --> blog and news are hostname

A Record

• point a Fully qualified domain name to ip address
• A records also have the ability to be pointed to the root of a domain
• most commonly used record type

AAAA Record

• similar to A Record, instead of pointing a domain name to IPv4, it points to IPv6 address

CNAME Record

• used to point multiple hosts to a single location

• also known as alias records, point a hostname to another hostname or FQDN

• can also be used to point a hostname to another domain or external hostname

• use CNAME record, only if there are no records for other that hostname

• CNAME records cannot be used for a root record

ANAME Record