Cloudflare দিয়ে DNS ও Security

লেসন ৩ / ৩৮

☁️ কেন Cloudflare?

  • Free CDN — global cache
  • Free SSL — automatic
  • DDoS protection unmetered
  • Fastest DNS
  • Page Rules, Firewall, Analytics

🔧 Setup

  1. cloudflare.com → Add Site
  2. DNS auto-scan
  3. Nameserver Cloudflare-এ point
  4. 1-2 hour active

🟧 Proxy ON vs OFF

Proxy ON (Orange):
- IP hidden, DDoS protection
- CDN cache, SSL automatic, WAF

DNS Only (Grey):
- Direct connection
- Real IP visible
- Mail (MX) সবসময় Grey

🛡️ Security Settings

  • SSL/TLS: Full (strict)
  • Always Use HTTPS: ON
  • Auto HTTPS Rewrites: ON
  • Bot Fight Mode: ON
  • Browser Integrity Check: ON

📜 Page Rules (Free 3)

# www → non-www
www.example.com/* → 301 → https://example.com/$1

# Cache static
example.com/static/* → Cache Everything, 1 month

# Bypass admin
example.com/admin/* → Bypass cache

🔥 Firewall Rules

(ip.geoip.country in {"CN" "RU"}) → Block
(http.request.uri.path eq "/login") → Challenge if >5/min
(cf.client.bot) and not (cf.verified_bot) → Block

🎓 মূল কথা ⭐

Cloudflare = free production-grade infrastructure। Day 1 setup। SSL Full strict, Always HTTPS, Bot Fight Mode = baseline।