DARIAEngineering/dcaf_case_management

Move to Cloudflare

Closed this issue · 2 comments

Thanks for creating an issue! Please fill out this form so we can be sure to have all the information we need, and to minimize back and forth.

  • What are we trying to do?
    Ensure our application is both secure and performant. As a follow up to #2687, we have decided to take advantage of Cloudflare's Pro plan, which includes super fast DNS, a WAF, DDOS protection, and more.

  • What feature or behavior is this required for?
    Security, performance, reliability

  • How could we solve this issue? (Not knowing is okay!)

  1. Giving funds a heads up about potential downtime
  2. Changing our nameservers from Namecheap to Cloudflare
  3. Updating the onboarding and offboarding documentation
  • Anything else?
    Other stuff might come up during the migration. I'll note it below if it does.

We are now using Cloudflare's nameservers for both dariaservices.com and dariaservices.org domains. The above items have been taken care of, but we still need to turn on proxy-ing for the CNAMES in order to leverage the WAF. Looks like there are some additional steps for doing this for CNAMES pointing to Heroku: https://support.cloudflare.com/hc/en-us/articles/205893698-Configure-Cloudflare-and-Heroku-over-HTTPS

Alright, proxying has been turned on for all CNAMEs that point to Heroku 🎉