Protect your key server with Keyless SSL and Cloudflare Tunnel integration
Mar 16, 2023Dina Kozlov
Summary
Introduced integration of Cloudflare Tunnels with Keyless SSL to secure key server communication. Previously, Keyless SSL required a public DNS record for key servers, exposing them to the internet. The new approach uses Cloudflare Tunnels to create a private, secure channel, meaning the key server's IP address is no longer publicly discoverable. This enhances security by ensuring only Cloudflare initiates connections to the key server, reducing its attack surface.
More from the Internal Service Exposure & Management with Spectrum trail
- Route public traffic to private applications with Cloudflare
- Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh
- How Automatic Return Routing solves IP overlap
- A QUICker SASE client: re-building Proxy Mode
- How Workers VPC Services connects to your regional private networks from anywhere in the world