-
1 Nếu origin chưa có cert public: SSL/TLS → Origin Server → Create Certificate (15 năm, hostnames cần thiết). If origin has no public cert: SSL/TLS → Origin Server → Create Certificate (15 years, required hostnames). បើ origin គ្មាន public cert៖ SSL/TLS → Origin Server → Create Certificate (15 years, hostnames ដែលត្រូវការ)។
Bạn sẽ thấy: What you'll see: អ្នកនឹងឃើញ៖ PEM cert + private key hiện một lần — lưu vào secret store, cài trên nginx/caddy/load balancer. PEM cert + private key shown once — store in a secret store, install on nginx/caddy/load balancer. PEM cert + private key បង្ហាញម្តង — រក្សាក្នុង secret store, ដំឡើងលើ nginx/caddy/load balancer។
Nhấp: Click: ចុច៖ Create Certificate → RSA hoặc ECDSA Create Certificate → RSA or ECDSA Create Certificate → RSA ឬ ECDSA
-
2 Cài cert trên origin, reload web server, xác nhận origin lắng nghe 443. Install the cert on origin, reload the web server, confirm origin listens on 443. ដំឡើង cert លើ origin, reload web server, បញ្ជាក់ថា origin ស្តាប់លើ 443។
Checkpoint: Checkpoint: Checkpoint៖ Từ máy có quyền: openssl s_client -connect ORIGIN_IP:443 không lỗi handshake (lab). From a host that can reach it: openssl s_client -connect ORIGIN_IP:443 handshake succeeds (lab). ពី host ដែលអាចទៅដល់៖ openssl s_client -connect ORIGIN_IP:443 handshake ជោគជ័យ (lab)។
-
3 Firewall origin: chỉ cho IP Cloudflare (hoặc bật Authenticated Origin Pulls). Origin firewall: allow only Cloudflare IPs (or enable Authenticated Origin Pulls). Origin firewall៖ អនុញ្ញាតតែ Cloudflare IPs (ឬបើក Authenticated Origin Pulls)។
Bạn sẽ thấy: What you'll see: អ្នកនឹងឃើញ៖ Danh sách IP: developers.cloudflare.com/fundamentals/reference/cloudflare-ip-addresses/ IP list: developers.cloudflare.com/fundamentals/reference/cloudflare-ip-addresses/ IP list: developers.cloudflare.com/fundamentals/reference/cloudflare-ip-addresses/
Checkpoint: Checkpoint: Checkpoint៖ Trình duyệt tới http(s)://ORIGIN_IP không ra được homepage production (timeout, 403, hoặc vhost mặc định). Browser to http(s)://ORIGIN_IP does not serve the production homepage (timeout, 403, or default vhost). Browser ទៅ http(s)://ORIGIN_IP មិន serve homepage production (timeout, 403, ឬ default vhost)។
