4 ms·
Considering that you suggest managed services, what’s a good version of the cloudflare tunnels and access, with the same features except that it does not termin
by aborsy 3y ago
Considering that you suggest managed services, what’s a good version of the cloudflare tunnels and access, with the same features except that it does not terminate the TLS?
- solardev 3y agoSorry, I don't know. That's not a use case I'm personally familiar with. Maybe others have ideas?
- andersa 3y agoThat doesn't exist, for it to work it has to terminate TLS. You can't do something like Access without decrypting the connection.
- solardev 3y agoPresumably there are other ways to tunnel encrypted traffic (SSH, VPN protocols, etc.?) that don't necessarily rely on TLS?
- andersa 3y agoThose typically require custom client side code, for a website you have the requirement that a web browser must be able to connect to it using TLS. Or maybe I'm not getting what your suggestion is - Access is supposed to intercept the connection and display a custom authentication page, with requests not reaching your server at all until they are actually authenticated.
- aborsy 3y agoThe reverse proxies sometimes support TLS pass through (see Traefik). If the reverse proxy puts an authentication page in front, sure, the TLS pass through may not work. But it could work if all you need from Cloudflare is its firewalls, restricting the IP range, hiding your IP, rate limiting, DDoS mitigation, not having to open port in internal servers, etc.
- Bognar 3y agoCloudFlare has some TCP proxying features, but most of what you actually get from adopting CF (or any CDN) requires decrypting traffic because most of the features depend on understanding the HTTP requests.