Digital Ocean’s Load Balancer can create a LE Cert on it’s own but only if you use their DNS. I have a setup where Cloudflare is the DNS for their CDN/Security capabilities but I’m using Digital Ocean’s Load Balancer. There’s no way to generate the cert from the Load Balancer in this setup. Is ther…

Hi @tanner , I’m not sure this situation has come up before on our forum. It seems to me that there are lots of ways that you could do it, but they might not be very well-integrated with Digital Ocean’s setup. I’m a bit confused about how the two services interact. Is Cloudflare pointed at the DO l…

Hey @schoen thanks so much for the prompt response. It’s as you mentioned Cloudflare DNS -> DO Load Balancer -> web app1/2 One VM can probably handle the requests with caching, but what I’m trying to solve is redundancy so that I have flexibility of tearing down or modifying the servers in case I …

Just tried using the Cloudflare Origin CA and added it to the load balancer but this is what is coming up [Screenshot_102818_044316_AM]

[image] tanner: Cloudflare is the DNS for their CDN/Security capabilities Are you actually using their CDN service, or just DNS? The Origin CA is only useful when used in conjunction with the CDN. If you're not using the CDN then it won't help you. If want to use the CDN for some subdomains …

Oh sorry, I think I might have misinterpreted how you were using Cloudflare, then. But I thought that “for their CDN/Security capabilities” meant that Cloudflare was actually terminating TLS connections and that you’d configured the DO infrastructure as the origin server in your Cloudflare account.

I’d be using their CDN service, I didn’t quite know how the cert was working so I had turned off their proxy for the time being to see if the load balancer would work with the Cloudflare cert. I’m guessing that it won’t unless, like you said, that the proxy is off. So for this situation I need Cl…

@jmorahan @schoen Okay, as long as I have the Cloudflare proxy on, I’m able to access both the front and backend of my WordPress site. However, I noticed that the scripts on the page were loaded with http. Normally I just change the home or site url to https:// and it’s fine, but when I do change it…

[image] tanner: No certs on the application server is fine? If they're on the same LAN or VPN and you trust that nobody can get malicious access to that network.

[image] tanner: I think this has to do with the application servers being http while Cloudflare and the load balancer utilizing https. Any tips? I guess it's probably because the connection coming in to the web server is always HTTP, so Wordpress doesn't know when it doesn't need to redirect. …

[image] jmorahan: One solution might be to leave it as HTTP in your Wordpress configuration and change it in Cloudflare instead, using the “Always Use HTTPS” and “Automatic HTTPS Rewrites” options. That's the funny thing, I have Always Use HTTPS and Automatic HTTPS Rewrites on in Cloudflare. …

Cert for Digital Ocean Load Balancer, Cloudflare DNS?

Server

schoen October 28, 2018, 11:12pm 9

If they're on the same LAN or VPN and you trust that nobody can get malicious access to that network.

Topic		Replies	Views
Let´s Encrypt + Load Balance (Force Callback) Help	12	1636	November 24, 2021
Certbot-dns-digitalocean blocked by cloudflare Help	15	1298	December 9, 2022
Cloudflare vs Lets encrypt Help	19	8166	February 27, 2018
Apache not found Help	68	2843	July 11, 2022
Issues Challenge behind load Balancer Help	17	5345	April 30, 2021

Cert for Digital Ocean Load Balancer, Cloudflare DNS?

Related topics