ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Moving to Cloudflare proxy

    Scheduled Pinned Locked Moved IT Discussion
    haproxy
    16 Posts 3 Posters 880 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @scottalanmiller
      last edited by

      @scottalanmiller said in Moving to Cloudflare proxy:

      @Dashrender said in Moving to Cloudflare proxy:

      Use NSLOOKUP to find CF assigned IP Proxy for webmail.domain.com
      Change local DNS to point webmail to previously found IP

      Ideally you don't want a local override, but to use a DNS entry that is external only. Off the top of my head, what if you gave a public hostname to the service, and an internal CNAME to point to that so that internal users do the same thing, but they are really hitting CF's round robin service just the same?

      I don't follow.

      I want users to use webmail.domain.com no matter where they are located. Please use that as a starting point and be specific on your thoughts.
      Thanks

      JaredBuschJ 1 Reply Last reply Reply Quote 0
      • DashrenderD
        Dashrender
        last edited by

        But that still doesn't solve the SMTP issue - which if can't be solved, kills this whole discussion.

        JaredBuschJ 1 Reply Last reply Reply Quote 0
        • JaredBuschJ
          JaredBusch @Dashrender
          last edited by JaredBusch

          @Dashrender said in Moving to Cloudflare proxy:

          @scottalanmiller said in Moving to Cloudflare proxy:

          @Dashrender said in Moving to Cloudflare proxy:

          Use NSLOOKUP to find CF assigned IP Proxy for webmail.domain.com
          Change local DNS to point webmail to previously found IP

          Ideally you don't want a local override, but to use a DNS entry that is external only. Off the top of my head, what if you gave a public hostname to the service, and an internal CNAME to point to that so that internal users do the same thing, but they are really hitting CF's round robin service just the same?

          I don't follow.

          I want users to use webmail.domain.com no matter where they are located. Please use that as a starting point and be specific on your thoughts.
          Thanks

          I believe this is where he was going.

          setup webmail.domain.com on CF as you have.
          setup wtf.domain.com on CF as a cname pointing to webmail.domain.com

          setup a webmail.domain.com on your local DNS pointing to wtf.domain.com

          But the problem is that as long as you use domain.com you need to point the internal DNS to a Cloudflare IP because of the entire split-dns disaster.

          So I would also like @scottalanmiller to clarify.

          scottalanmillerS 1 Reply Last reply Reply Quote 0
          • JaredBuschJ
            JaredBusch @Dashrender
            last edited by JaredBusch

            @Dashrender said in Moving to Cloudflare proxy:

            But that still doesn't solve the SMTP issue - which if can't be solved, kills this whole discussion.

            One thing at a time. Conflating issues is a horrible common scenario from you.

            While this is needed to get the entire package, don't short circuit the process.

            DashrenderD 1 Reply Last reply Reply Quote 0
            • DashrenderD
              Dashrender @JaredBusch
              last edited by

              @JaredBusch said in Moving to Cloudflare proxy:

              @Dashrender said in Moving to Cloudflare proxy:

              But that still doesn't solve the SMTP issue - which if can't be solved, kills this whole discussion.

              One thing at a time. Conflating issues is a horrible common scenario from you.

              While this is needed to get the entire package, don't short circuit the process.

              Fine - new post coming.

              1 Reply Last reply Reply Quote 0
              • scottalanmillerS
                scottalanmiller
                last edited by

                fine.jpg

                JaredBuschJ 1 Reply Last reply Reply Quote 1
                • JaredBuschJ
                  JaredBusch @scottalanmiller
                  last edited by

                  @scottalanmiller still waiting on you to clarify what you meant.

                  1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller @JaredBusch
                    last edited by

                    @JaredBusch said in Moving to Cloudflare proxy:

                    @Dashrender said in Moving to Cloudflare proxy:

                    @scottalanmiller said in Moving to Cloudflare proxy:

                    @Dashrender said in Moving to Cloudflare proxy:

                    Use NSLOOKUP to find CF assigned IP Proxy for webmail.domain.com
                    Change local DNS to point webmail to previously found IP

                    Ideally you don't want a local override, but to use a DNS entry that is external only. Off the top of my head, what if you gave a public hostname to the service, and an internal CNAME to point to that so that internal users do the same thing, but they are really hitting CF's round robin service just the same?

                    I don't follow.

                    I want users to use webmail.domain.com no matter where they are located. Please use that as a starting point and be specific on your thoughts.
                    Thanks

                    I believe this is where he was going.

                    setup webmail.domain.com on CF as you have.
                    setup wtf.domain.com on CF as a cname pointing to webmail.domain.com

                    setup a webmail.domain.com on your local DNS pointing to wtf.domain.com

                    But the problem is that as long as you use domain.com you need to point the internal DNS to a Cloudflare IP because of the entire split-dns disaster.

                    So I would also like @scottalanmiller to clarify.

                    Like that, but more like...

                    webmail.domain.com on CF A Record
                    webmail.wtfdomain.com on LAN DNS CNAME pointing to webmail.domain.com
                    webmail.wtfdomain.com on Public DNS CNAME pointing to webmail.domain.com

                    JaredBuschJ 1 Reply Last reply Reply Quote 0
                    • JaredBuschJ
                      JaredBusch @scottalanmiller
                      last edited by

                      @scottalanmiller said in Moving to Cloudflare proxy:

                      @JaredBusch said in Moving to Cloudflare proxy:

                      @Dashrender said in Moving to Cloudflare proxy:

                      @scottalanmiller said in Moving to Cloudflare proxy:

                      @Dashrender said in Moving to Cloudflare proxy:

                      Use NSLOOKUP to find CF assigned IP Proxy for webmail.domain.com
                      Change local DNS to point webmail to previously found IP

                      Ideally you don't want a local override, but to use a DNS entry that is external only. Off the top of my head, what if you gave a public hostname to the service, and an internal CNAME to point to that so that internal users do the same thing, but they are really hitting CF's round robin service just the same?

                      I don't follow.

                      I want users to use webmail.domain.com no matter where they are located. Please use that as a starting point and be specific on your thoughts.
                      Thanks

                      I believe this is where he was going.

                      setup webmail.domain.com on CF as you have.
                      setup wtf.domain.com on CF as a cname pointing to webmail.domain.com

                      setup a webmail.domain.com on your local DNS pointing to wtf.domain.com

                      But the problem is that as long as you use domain.com you need to point the internal DNS to a Cloudflare IP because of the entire split-dns disaster.

                      So I would also like @scottalanmiller to clarify.

                      Like that, but more like...

                      webmail.domain.com on CF A Record
                      webmail.wtfdomain.com on LAN DNS CNAME pointing to webmail.domain.com
                      webmail.wtfdomain.com on Public DNS CNAME pointing to webmail.domain.com

                      Ok, a second domain. That I expect to work liek this.

                      1 Reply Last reply Reply Quote 0
                      • DashrenderD
                        Dashrender
                        last edited by

                        Seriously you want me to buy another domain to fix this?

                        I'm frazzled this morning - so I might be missing something.

                        JaredBuschJ scottalanmillerS 2 Replies Last reply Reply Quote 0
                        • JaredBuschJ
                          JaredBusch @Dashrender
                          last edited by JaredBusch

                          @Dashrender said in Moving to Cloudflare proxy:

                          Seriously you want me to buy another domain to fix this?

                          I'm frazzled this morning - so I might be missing something.

                          I would just use an A record on your local DNS pointing to WTF ever Cloudflare resolves your FQDN to.

                          But paying more attention to what @scottalanmiller said, he has that backwards on the second domain.

                          CF: A Record: webmail.domain.com pointing to your public IP, orange cloud on.
                          CF: CNAME: webmail.wtfdomain.com pointing to webmail.domain.com
                          Local DNS: CNAME: webmail.domain.com pointing to webmail.wtfdomain.com

                          1 Reply Last reply Reply Quote 0
                          • scottalanmillerS
                            scottalanmiller @Dashrender
                            last edited by

                            @Dashrender said in Moving to Cloudflare proxy:

                            Seriously you want me to buy another domain to fix this?

                            Yes, because someone screwed up with the original domain, so yes, you need to either fix that or do something to work around it. Mistakes have costs, this is a pretty trivial one.

                            1 Reply Last reply Reply Quote 0
                            • 1 / 1
                            • First post
                              Last post