
3/28/2020 · Achiel van der Mandele
What this post added
This post details the migration from a traditional VPN-based security model to Cloudflare's Access zero-trust proxy for internal applications. It highlights the challenges of VPN management and the benefits of Access for protecting HTTP-based services. For non-HTTP services like git+ssh, Access with SSH support was introduced. During the transition, Spectrum was used to protect the existing VPN infrastructure from DDoS attacks and improve performance, addressing MTU issues by setting it to 1420 for UDP-based VPN traffic.