Join the community today
Register Now

Cloudflare problem in iran due to Censorship

Discussion in 'Domains, DNS, Email & SSL Certificates' started by R0rke, Dec 23, 2022.

  1. R0rke

    R0rke Member

    168
    22
    18
    Jun 2, 2016
    Iran
    Ratings:
    +37
    Local Time:
    3:09 PM
    2
    10
    @eva2000
    We are going through difficult times in Iran, The Iranian government has limited access to the public Internet for all type of users.
    I have bad experience using Cloudflare as a Web Developer in Iran when I enable Cloudflare SSL all websites become Censored. so I just want to know , is it possible to completely disable CloudFlare SSL and stick with Lets Encrypt provided with CMM?
    I tried to disable CL SSL but stuck with Redirect loop!


    somehow centminmod.com is working well for me, but i think you are using paid Cloudflare services.
    the problem shows up on free plans!
    any suggestions?
     
    Last edited: Dec 23, 2022
  2. eva2000

    eva2000 Administrator Staff Member

    53,209
    12,113
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,649
    Local Time:
    8:09 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Sorry to hear the situation in Iran :(

    When you disable Cloudflare SSL, you are disabling HTTPS and port 443 access to your domain if it's still Cloudflare orange cloud proxy enabled on DNS records on Cloudflare dashboard. Only why I see is disabling the Cloudflare orange cloud proxy and use Cloudflare only for DNS https://community.centminmod.com/threads/cloudflare-dns-only-configuration.6867/. But then you're revealing your origin Centmin Mod server's real IP address and web host. Which isn't something you may want to do and no idea if that web host is also blocked from public internet access in your country.

    So centminmod.com, blog.centminmod.com and community.centminmod.com all work for you in Iran? Does cloudflare.com official site work?

    Maybe some clues at https://community.cloudflare.com/search?q=iran SSL. From quick browse it looks like Iran blocking sites that use Cloudflare Universal SSL. My centminmod.com site is not using Universal SSL, I have that disabled and using the paid Cloudflare Advanced Certificate Managed SSL certificates addon at US$10/month instead https://developers.cloudflare.com/ssl/advanced-certificate-manager. However, some Cloudflare staff in search results said the SSL certificate choice doesn't matter so maybe just lucky some Cloudflare sites aren't being blocked?
     
  3. AHTOLLlKA

    AHTOLLlKA Member

    32
    4
    8
    Dec 1, 2017
    Ratings:
    +9
    Local Time:
    1:09 AM
    all my domains proxed via cloudflare
    before setup new domain in CMM, i go to admin panel of cloudflare and enter menu SSL/TLS, and check Full, and after that i setup new domain via CMM

    [​IMG]
     
  4. R0rke

    R0rke Member

    168
    22
    18
    Jun 2, 2016
    Iran
    Ratings:
    +37
    Local Time:
    3:09 PM
    2
    10
    yeah, no problem.

    are you in IRAN?
    some Devs in iran also mentioned that.
    the problem happens when user uses Universial SSL as u said
     
    Last edited: Dec 25, 2022