Cloudflare
Hello everyone, In this article, we tried to explain what Cloudflare is and its services with my classmate Omar Mohamed. These services are given in the following content chart, respectively, we wish you good reading.
Contents
├── What is Cloudflare
├── DNS
├── SSL Certificate
├── Email
├── Security
│ └── DDoS Protection
├── Web Analytics
│ ├── Traffic
│ └── Security
└── Conclusion and Contact
What is Cloudflare
Cloudflare is an integrated security and performance suite for web-based applications. The company was founded in 2010 by Matthew Price, Lee Holloway and Michelle Zatlyn. Cloudflare is an internet infrastructure provider aims to enhance performance and security of websites. Cloudflare provides most of it’s core features for free while the advanced features are paid. According to The Hill, it is used by more than 20 percent of the entire internet for its web security services.
DNS
Cloudflare provides a DNS Dashboard which allow us to manages all records and choose whether to proxy our subdomains throw Cloudflare’s infrastructure or not. It supports custom Nameservers, which allows us to create our own nameservers and add them as a glue records at the registrar. Cloudflare also supports DNSSEC which protects against forged nameservers. DNSSEC protected zones are cryptographically signed to ensure the DNS records received are identical to the DNS records published by the domain owner. It also supports creating the required TXT records for email security such as: SPF, DKIM, DMARC
SSL Certificate
Cloudflare provides 4 SSL/TLS encryption modes as follows: Off, which disables https. Flexible, encrypts the traffic between client Cloudflare. Full, encrypts end-to-end using a self-signed certificate. Strict, encrypts end-to-end using a trusted CA or Cloudflare origin certificate. Cloudflare allows us to set the minimum TLS version and allow only HTTPS access to the website.
Cloudflare provides 3 type of certificates. Edge certificate: A certificate issued by Cloudflare to encrypt the traffic between browser and Cloudflare. Client certificate: Allows us to authenticate and secure out API’s and websites. Blocks traffic from devices that do not have a valid client SSL/TLS certificate with mTLS rules. Origin certificate: A certificate that is only valid for encryption between Cloudflare and your origin server.
Cloudflare allows us to create custom email addresses for our domain and route incoming emails to our preferred mailbox or email worker to automate the processing of our emails.
Security
Cloudflare provides variety of security solutions to protect the websites from vulnerabilities and possible attacks. These solutions are: WAF (Web Application Firewall), Page Shield, DDoS Protection, and Bots prevention.
- DDoS Protection
Cloudflare’s automated DDoS protection systems constantly analyze traffic and generate real-time signatures to mitigate attacks across the network and application layers. DDoS protection is enabled by default for free to all the customers. It can mitigate HTTP floods, amplification HTTP attacks, reflection HTTP, SSL exhaustion floods, SSL negotiation, ACK floods, SYN-ACK amplification attacks, UDP attacks, ICMP attacks and DDoS attacks launched by botnets such as Mirai.
Web Analytics
Cloudflare Web Analytics provides free, privacy-first analytics for your website without changing your DNS or using Cloudflare’s proxy. Cloudflare Web Analytics helps you understand the performance of your web pages as experienced by your site visitors.
- Traffic
Traffic is a visualization of the unique visitors visiting your website, the requests coming to your site and the countries where these requests come from.
- Security
Security is a visualization of attacks on your website and these types of attacks.
Conclusion and Contact
- Conclusion : In short, Cloudflare provides security, flexibility and performance in your applications, and you can use most of them for free. If you want to learn more about Cloudflare and see all its services, proceed to the official website. Link
- Contact : 1ahmetfurkandemir@gmail.com , omar@omarmohamed.com
