Question
Let's encrypt certs for DO LoadBalancer over CloudFlare
- Posted November 14, 2018
- Load BalancingScalingUbuntu 18.04
I thkink to create following scheme of servers:
As a global load balancer is CloudFlare, after it, request going to DO LoadBalancer and finaly to One of app-server
Can I use Lets Encrypt in this case for creating certificates ?
I understand, that if i choose DO LoadBalancer Only, I can do that, but if I have an CloudFlare too?
Subscribe
Share
Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Sign in to AnswerThese answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
The other option is to let CloudFlare handle the ssl, set the load balancer to SSL Passthrough, and turn on authenticated pulls with CloudFlare. It’ll make the entire connection encrypted and ensure all data passes through CloudFlare.
Hi Danil,
Thanks for your question. Currently, the way we do domain validation, it’s based on using DigitalOcean DNS, which means that CloudFlare isn’t compatible with our Let’s Encrypt integration. We realize this is important and is something we hope to improve on down the line.
Thanks!