readthedocs.org icon indicating copy to clipboard operation
readthedocs.org copied to clipboard

Docs: missing information on Cloudflare to Cloudflare proxy configuration

Open agjohnson opened this issue 1 year ago • 2 comments

I was looking for these directions to point a user to them but could not find them in the docs anymore.

From the translation file:

"Due to a limitation, a domain cannot be proxied on Cloudflare to another "
"Cloudflare account that also proxies. This results in a \"CNAME Cross-User "
"Banned\" error. In order to do SSL termination, we must proxy this "
"connection. If you don't want us to do SSL termination for your domain -- "
"**which means you are responsible for the SSL certificate** -- then set your"
" CNAME to ``cloudflare-to-cloudflare.readthedocs.io`` instead of "
"``readthedocs.io``."

Perhaps we removed this on purpose, as it's not a common configuration?

agjohnson avatar May 30 '24 02:05 agjohnson

I think it was removed because it was no longer a problem :man_shrugging:

stsewd avatar May 30 '24 12:05 stsewd

In that users can just use the standard CNAME with their own Cloudflare account? I guess we'll see. I had a user note that they had problems using their own Cloudflare account in front of us and mentioned the record as a fix.

agjohnson avatar May 30 '24 17:05 agjohnson

So, yeah, looks like users need to uncheck the "proxy" option when creating a CNAME. And we shouldn't recommend using the cloudflare-to-cloudflare.readthedocs.io target, as that points directly to our LB, and we are required to use CF for addons now.

stsewd avatar Oct 29 '24 16:10 stsewd

I'm putting this issue in Q4 so we update this docs.

humitos avatar Oct 30 '24 08:10 humitos