Question Cloudflare

[othmaqsa]

Server operating system version

18.0.55 Update #1

Plesk version and microupdate number

20.04.6 LTS

Hello,

I have few questions about using Cloudflare with Plesk.

1- Do I need to add all the DNS records mentioned in Plesk, in the Cloudflare dashboard, like SRV record etc ?
2- Is it recommended to use Cloudflare's Full (Strict) encryption with Plesk or Full is enough? I have tried few months ago to use the option Full, but I have noticed the error 520/521 is randomly occur, multiple times per day?

Thanks.

 

[scsa20]

1- Do I need to add all the DNS records mentioned in Plesk, in the Cloudflare dashboard, like SRV record etc ?

You don't need all records, only those you believe you'll actually need so if you're planning on using autodiscover for email configuration then yes you'll need the SRV records.

Now there is an extension that allows you to sync your DNS records to Cloudflare for you so you can do all your records within Plesk itself.

2- Is it recommended to use Cloudflare's Full (Strict) encryption with Plesk or Full is enough? I have tried few months ago to use the option Full, but I have noticed the error 520/521 is randomly occur, multiple times per day?

In all honestly it's completely up to you what level of encryption to use but depending on which level will depends on if you need a valid certificate or not. Like for one of my site I use flexible so the encryption between the browser and cloudflare is encrypted but the rest is whatever because I've had weird issues using any of the others and been too lazy to fix it. Full allows you to use a self signed certificate on the server while full strict requires you to have a certificate from a trusted CA or use the cloudflare's origin ca cert on the server. It basically comes down to personal preferences with how you have things configured.

TECNECHALLY speaking you should use Full Strict whenever possible and use Full if you can't use Full Strict.

 

[othmaqsa]

@scsa20 , thank you for your message.

I have another question please:

I have added real_ip_header CF-Connecting-IP; in the Additional nginx directives in order to log the real IP address of the user, but the CF IP still showing in the logs.

A solution please ?

 

[othmaqsa]

@scsa20 , maybe I need to restart the server so that the change take effect ?

 

[scsa20]

If you do a search you can find this post

Nginx ngx_http_realip_module for Plesk?

Any chance of getting the Nginx ngx_http_realip_module module for the version of nginx included in Plesk 12 on CentOS 6 & 7? We have customers using Cloudflare who want the real IP in their logs from the requests handled by nginx; we can do the cloudflare mod to handle the requests apache sees.

talk.plesk.com

Follow that instructions to get real IP working correctly.

 

[othmaqsa]

@scsa20
I forgot to mention that I have followed this tutorial:

https://support.plesk.com/hc/en-us/articles/12377061126807-Incorrect-IP-addresses-are-logged-by-Plesk-behind-a-Cloudflare-or-Google-Cloud-Load-Balancing

 

[othmaqsa]

@scsa20 , same problem. I have followed the link you sent me and the link I sent to you, but the Cloudflare IP still showing.