Sổ tay cấu hình (dashboard runbook) Configuration runbook (dashboard) runbook កំណត់រចនាសម្ព័ន្ធ (dashboard)

Làm theo từng bước Follow along ធ្វើតាមជំហាន

1. 1 Add site Add site Add site

   Nhấp: Click: ចុច៖ dash.cloudflare.com → Onboard a domain / Add a site dash.cloudflare.com → Onboard a domain / Add a site dash.cloudflare.com → Onboard a domain / Add a site

   Nhập: Enter: បញ្ចូល៖ Zone apex; plan Free để học Zone apex; Free plan to learn Zone apex; plan Free ដើម្បីរៀន

2. 2 DNS review DNS review DNS review

   Nhấp: Click: ចុច៖ DNS → Records DNS → Records DNS → Records

   Nhập: Enter: បញ្ចូល៖ Đối chiếu MX/TXT với DNS cũ; screenshot Diff MX/TXT vs old DNS; screenshot Diff MX/TXT vs DNS ចាស់; screenshot

3. 3 Proxy Proxy Proxy

   Nhấp: Click: ចុច៖ DNS → Records → Proxied trên A/CNAME HTTP DNS → Records → Proxied on HTTP A/CNAME DNS → Records → Proxied on HTTP A/CNAME

   Checkpoint: Checkpoint: Checkpoint៖ curl -sI https://host | grep -i cf-ray curl -sI https://host | grep -i cf-ray curl -sI https://host | grep -i cf-ray

4. 4 SSL mode SSL mode SSL mode

   Nhấp: Click: ចុច៖ SSL/TLS → Overview → Full (strict) SSL/TLS → Overview → Full (strict) SSL/TLS → Overview → Full (strict)

   Nhập: Enter: បញ្ចូល៖ Always Use HTTPS On Always Use HTTPS On Always Use HTTPS On

5. 5 Origin CA + lockdown Origin CA + lockdown Origin CA + lockdown

   Nhấp: Click: ចុច៖ SSL/TLS → Origin Server → Create Certificate; firewall allow Cloudflare IPs SSL/TLS → Origin Server → Create Certificate; firewall allow Cloudflare IPs SSL/TLS → Origin Server → Create Certificate; firewall allow Cloudflare IPs

6. 6 WAF WAF WAF

   Nhấp: Click: ចុច៖ Security → WAF → Managed rules → Log 24–48h → Block Security → WAF → Managed rules → Log 24–48h → Block Security → WAF → Managed rules → Log 24–48h → Block

7. 7 Rate limit Rate limit Rate limit

   Nhấp: Click: ចុច៖ Security → WAF → Rate limiting rules Security → WAF → Rate limiting rules Security → WAF → Rate limiting rules

   Nhập: Enter: បញ្ចូល៖ /login 10 req / 1 min / IP → Log rồi Challenge /login 10 req / 1 min / IP → Log then Challenge /login 10 req / 1 min / IP → Log បន្ទាប់មក Challenge

8. 8 Cache Rules Cache Rules Cache Rules

   Nhấp: Click: ចុច៖ Caching → Cache Rules Caching → Cache Rules Caching → Cache Rules

   Nhập: Enter: បញ្ចូល៖ Bypass /admin /checkout; cache /assets/* TTL 1d Bypass /admin /checkout; cache /assets/* TTL 1d Bypass /admin /checkout; cache /assets/* TTL 1d

9. 9 Observe Observe Observe

   Nhấp: Click: ចុច៖ Caching → Analytics; Analytics → Web Analytics; Security → Events Caching → Analytics; Analytics → Web Analytics; Security → Events Caching → Analytics; Analytics → Web Analytics; Security → Events

Cẩn thận Watch out ប្រុងប្រយ័ត្ន

• Nhãn Security / SSL gom lại theo thời gian — tìm “WAF”, “encryption mode”, “cache rules”. Security / SSL labels get regrouped over time — search for “WAF”, “encryption mode”, “cache rules”. Label Security / SSL ត្រូវបានរៀបឡើងវិញតាមពេល — ស្វែងរក “WAF”, “encryption mode”, “cache rules”។

Mẹo Tips គន្លឹះ

• Tự động hóa sau khi tay làm đúng một lần: Terraform / API create zone + rulesets. Automate only after one successful manual pass: Terraform / API create zone + rulesets. ស្វ័យប្រវត្តិតែប៉ុណ្ណោះបន្ទាប់ពីធ្វើដោយដៃជោគជ័យមួយដង: Terraform / API create zone + rulesets។