/ Register

Welcome to Centmin Mod Community
Register Now

Security CMM + Lets Encrypt + Sucuri (Paid) + Cloudflare

Discussion in 'System Administration' started by lushen, Oct 6, 2018.

Previous Thread Next Thread
Loading...
  1. Oct 6, 2018 #1
    lushen

    lushen New Member

    16
    2
    3
    Nov 13, 2017
    Ratings:
    +4
    Local Time:
    7:24 AM
    Hi all,

    I am slowly getting to the point where I manage a couple of Wordpress blog servers and some of them getting hit by scriptkiddies lately (No hack/breach so far).

    Until now I tried to secure the servers as much as possible, but the work to do this takes too much time and I also tested out the Sucuri WP Plugin which comes pre-installed when you install WP with CMM.

    My question now is: Will the sucuri WAF work with Cloudflare?
    I still would like to use Cloudflare to hide the IP, even though it is still possible to get the IP but I like to use more layers of security.

    So lets say I will buy the Pro Package for $9.99/month, does it include the key for the WP plugin and I am still able to use Cloudflare on top of that? Or should I go with the $19.98/month Package because of the "SSL Certificate Support"?
    Is it even worth to use Cloudflare when I have Sucuri?

    I have never really used any paid WAF so far, so, sorry if it sounds noob-ish.

    Any help is appreciated, thanks!
     
  2. Oct 6, 2018 #2
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    3:24 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    I wouldn't advise it as you end up being slower. It's why I moved from Sucuri to Cloudflare Pro with Cloudflare WAF. You have alot more control over your WAF with Cloudflare than Sucuri :)
     
  3. Oct 6, 2018 #3
    Jimmy

    Jimmy Well-Known Member

    1,799
    391
    83
    Oct 24, 2015
    East Coast USA
    Ratings:
    +999
    Local Time:
    1:24 AM
    I believe you can get SSL Support for $5 a month as a separate fee. I only pay $5 a month for CF.
     
  4. Oct 6, 2018 #4
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    3:24 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    yes that's what i did ordered Cloudflare dedicated SSL cert for $5/month :)
     
  5. Oct 6, 2018 #5
    lushen

    lushen New Member

    16
    2
    3
    Nov 13, 2017
    Ratings:
    +4
    Local Time:
    7:24 AM
    Honest question: What is the difference (Benefits) between the dedicated CF SSL cert and a LE generated cert?
     
  6. Oct 7, 2018 #6
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    3:24 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    It's not the cert but what comes with the cert. So CF dedicated SSL cert comes with Cloudflare CDN/performance caching. Using Letsencrypt SSL on front end means turning off CF CDN/cache which reduces performance.
     
  7. Dec 7, 2018 #7
    minodd

    minodd Member

    31
    4
    8
    Nov 29, 2018
    Ratings:
    +12
    Local Time:
    1:24 PM
    Nginx 1.15.6
    MariaDB 10
    So, what would the difference between a paid CF SSL cert and a free CF SSL cert? I'm now using the free one.
     
  8. Dec 7, 2018 #8
    rdan

    rdan Well-Known Member

    5,452
    1,418
    113
    May 25, 2014
    Ratings:
    +2,212
    Local Time:
    1:24 PM
    Mainline
    10.2
    ECC & RSA (Pro) vs ECC only (Free Plan).
     
  9. Dec 7, 2018 #9
    eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    3:24 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    What @rdan stated, Cloudflare Pro offers standard RSA 2048bit SSL certificate (legacy compatibility with older browsers) + ECC 256bit ECDSA SSL certificates (faster performance) while Cloudflare Free Universal SSL certs are ECC 256bit ECDSA SSL certificates which only work with modern web browsers.
     
  10. Dec 7, 2018 #10
    minodd

    minodd Member

    31
    4
    8
    Nov 29, 2018
    Ratings:
    +12
    Local Time:
    1:24 PM
    Nginx 1.15.6
    MariaDB 10
    Okay, I see. Thank you!
     
Previous Thread Next Thread
Loading...

.