Cloudflare Origin CA Certificates: Generation and Full (Strict) SSL/TLS Setup
Learn how to generate Cloudflare Origin CA certificates, configure hostname SANs and key formats, and enable Full (strict) SSL/TLS mode in Cloudflare.
Category: Security
Nginx auth_request: Subrequest Authentication Architecture and Variable Propagation
Learn the architecture, build configuration, status code evaluation, and variable propagation mechanics of Nginx ngx_http_auth_request_module based on official documentation.
Cloudflare Authenticated Origin Pulls: Configuring mTLS and Nginx Client Certificate Verification
Learn how Cloudflare Authenticated Origin Pulls (AOP) uses mTLS to prevent direct origin bypass, and how to configure zone-level custom certificates on Nginx and…
Protecting Origin Servers Behind Cloudflare: iptables Allowlists and Authenticated Origin Pulls Architecture
Learn how host-level iptables allowlists and Authenticated Origin Pulls (mTLS) operate to defend origin servers against direct IP bypass behind Cloudflare.