Question

Let's encrypt certs for DO LoadBalancer over CloudFlare

Posted November 14, 2018 1.3k views
ScalingLoad BalancingUbuntu 18.04

I thkink to create following scheme of servers:

As a global load balancer is CloudFlare, after it, request going to DO LoadBalancer and finaly to One of app-server

Can I use Lets Encrypt in this case for creating certificates ?

I understand, that if i choose DO LoadBalancer Only, I can do that, but if I have an CloudFlare too?

Add a comment
danil1754c955df80bf33de5db
By:
danil1754c955df80bf33de5db
Add a comment

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
2 answers
tylerdo November 16, 2018

Hi Danil,

Thanks for your question. Currently, the way we do domain validation, it’s based on using DigitalOcean DNS, which means that CloudFlare isn’t compatible with our Let’s Encrypt integration. We realize this is important and is something we hope to improve on down the line.

Thanks!

Reply Report
rjhancock December 7, 2018

The other option is to let CloudFlare handle the ssl, set the load balancer to SSL Passthrough, and turn on authenticated pulls with CloudFlare. It’ll make the entire connection encrypted and ensure all data passes through CloudFlare.

Reply Report
Submit an Answer

Related

Looking for something else?

Ask a new question Search for more help