A user, undeadcorvid, is experiencing issues with a plugin connecting to their Discourse forum due to Cloudflare. After removing the reverse proxy through Cloudflare, the connection worked. However, they need to use Cloudflare for security reasons, as they run a political forum and are at risk of DDoS attacks.
Pfaffman initially suggested turning off the Rocket Loader, but michaeld disagreed, stating that Rocket Loader only breaks Javascript. Pfaffman concurred, acknowledging that the issue is likely something else.
Falco suggested making the little cloud next to the DNS entry gray instead of orange, which may resolve the issue. Codinghorror recommended enabling the Cloudflare template in app.yml if using it is a requirement.
Other users, including codinghorror, mentioned that Cloudflare may not be necessary unless the site is at risk of a massive DDoS attack. However, undeadcorvid explained their security concerns and the need for Cloudflare protection. Stephen noted that Cloudflare only protects one path to the server, leaving the origin IP vulnerable if discovered.
Hi there!
I’ve been struggling to get the plugin to connect to my Discourse - though all the API information was correct, the plugin couldn’t find my forum. On a wild guess I removed my reverse proxy through Cloudflare, and now it’s working perfectly. Is there a certain Cloudflare setting that interferes with how this plugin works? I’m completely stumped. Not using Cloudflare isn’t an option for me.
Turn off the rocket loader.
There are dozens of topics about problems with cloudflare that you can read.
Rocket loader modifies the Javascript while the plugin will connect to the API … so I doubt that this has anything to do with rocket loader?
I defer to @michaeld pretty much always. This time I even understand what he’s saying.
It’s not the Rocket Loader, as it just breaks Javascript. It’s something else.
It looks like it. There are dozens of topics where people describe problems and a very few where people say that it’s “easy.”
Yeah, I have gone through a few posts I found on here on this same problem and none of them have so far fixed it - looked into TLS settings, ect. And Rocket Loader definitely isn’t the culprit, I haven’t ever had it on. Never felt the need to turn it on.
I’ll keep trying and will report back if I find the solution in my case. It’s a shame they don’t play nice together very easily.
Make the little cloud next to the DNS entry gray instead of orange.
Unless you have reason to believe your site will be the victim of a massive DDoS, you don’t need Cloudflare.
I run a political forum, unfortunately. Or, more accurately, some of the work I do invites the nastier side of the Internet. It’s common for people who do what I do to get DDoS’d, doxxed, ect. It’s why I like the way Discourse works and I’m not taking chances on security.
Be sure you enable the cloudflare template in app.yml if using it is a requirement.
Bear in mind Cloudflare only protects one path to your server. If the origin IP is found you’re still wide open.