Authenticated Origin Pull on load balancer

while trying to offload SSL to load balancer on oracle cloud, i cant find equivalent to “ssl_verify_client on”

Do I understand correctly that without “ssl_verify_client on” the traffic will not be restricted to CF source ?

I mean, if you whitelist the allowed IPs to only Cloudflare then it will help still.

in case of spoofing CF ip then we need the authenticated-origin-pull

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.