Cloudflare Best SSH configuration with Cloudflare?

I've just enabled Cloudflare, and quickly realized it will require me to change how I use SSH, as they block port 22 and the other custom SSH port I was using.

It seems I have a few options. I could:

• SSH directly into the server's IP address
• Create a DNS record for my server that bypasses Cloudflare (like ssh.example.com)
• Run SSH on one of these ports that Cloudflare leaves open

What do you guys do? Which would you recommend?

The bottom option seems like the best one to me.

---

 

So why did ssh connections fail as soon as I enabled Cloudflare?

 

I just use the domain.

Code (Text):

ssh username@mydomain.com

Guess I will have to start using the IP now. Too bad I already locked myself out of my server while trying to change the SSH port on my box... not sure what I did wrong. And now ReliableSite's KVM access isn't working... Fun times.

 

Except that you can't connect via SSH using the domain if you're using Cloudflare.

 

Doesn't that run the risk of exposing your server's real IP though?

Is there a way to query all the A records of a TLD, so you could see all its subdomains? Or does each unique subdomain have to be queried from the root name servers directly?