IPv6 - add Cloudflare Proxy

[gerbrent]

see #16

Intention is to support IPv6 via Cloudflare Proxy (alongside other Cloudflare feature, caching, etc)

JB to add Cloudflare Proxying to:

• new.jb.com
• dev.jb.com
• jb.com (at time of new website publishing?)
• ... ?

[gerbrent]

@ironicbadger added proxying this AM, so just need some testing to confirm

[ironicbadger]

We were missing a setting in the Cloudflare dashboard for SSL/TLS encryption. After setting this to Full (strict) things are working as expected.

A couple of notes. This requires a valid certificate from a trusted CA. We are using lets encrypt which qualifies but self-signed certs or certs from non trusted CAs will not work.

[ironicbadger]

With regards to IPv6 I'm reticent to even touch it for now - especially as part of the 1.0 milestone I would argue it's not important. Very few ISPs even support IPv6!

My vote would be to defer this beyond 1.0 milestone.

[elreydetoda]

There's no need to move it to the next milestone, it's working since you turned on the DNS proxying 😁

https://geekflare.com/tools/tests/vn4ympfvz

[elreydetoda]

We were missing a setting in the Cloudflare dashboard for SSL/TLS encryption. After setting this to Full (strict) things are working as expected.

A couple of notes. This requires a valid certificate from a trusted CA. We are using lets encrypt which qualifies but self-signed certs or certs from non trusted CAs will not work.

So, in regards to this...shouldn't flexible also work? It'll also not require you have a cert on the jb.com server (which is still good to do, but isn't necessarily required)

[ironicbadger]

So, in regards to this...shouldn't flexible also work? It'll also not require you have a cert on the jb.com server (which is still good to do, but isn't necessarily required)

Yes, however for prod stricter is better imho.

[elreydetoda]

Ya, but when you put it to strict mode it'll be for the whole domain not just jb.com but even the new.jb.com, dev., etc..., which isn't a bad thing IMO (I'm all for more security) but just want to make sure you/JB are aware of that 🙃