I thkink to create following scheme of servers:
As a global load balancer is CloudFlare, after it, request going to DO LoadBalancer and finaly to One of app-server
Can I use Lets Encrypt in this case for creating certificates ?
I understand, that if i choose DO LoadBalancer Only, I can do that, but if I have an CloudFlare too?
Hi Danil,
Thanks for your question. Currently, the way we do domain validation, it's based on using DigitalOcean DNS, which means that CloudFlare isn't compatible with our Let's Encrypt integration. We realize this is important and is something we hope to improve on down the line.
Thanks!
The other option is to let CloudFlare handle the ssl, set the load balancer to SSL Passthrough, and turn on authenticated pulls with CloudFlare. It'll make the entire connection encrypted and ensure all data passes through CloudFlare.