Authenticated Origin Pull on load balancer

Website, Application, Performance Security
1

while trying to offload SSL to load balancer on oracle cloud, i cant find equivalent to “ssl_verify_client on”

Do I understand correctly that without “ssl_verify_client on” the traffic will not be restricted to CF source ?

2

I mean, if you whitelist the allowed IPs to only Cloudflare then it will help still.

3

@Cyb3r-Jak3
in case of spoofing CF ip then we need the authenticated-origin-pull

4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.