Cloudflare only connects to nginx server on port 80, even with full encryption

Zero Trust Cloudflare Tunnel
1

What is the name of the domain?

.

What is the issue you’re encountering

I’ve set the encryption mode to full (strict), deployed the origin CA on nginx, and set it up to handle HTTPS traffic, but cloudflare still only connects to nginx on port 80.

3

The ingress rules in my tunnel configuration:

ingress:
  - hostname: domain.com
    service: https://localhost:443
    originRequest:
      noTLSVerify: true
  - hostname: "*.domain.com"
    service: https://localhost:443
    originRequest:
      noTLSVerify: true
  - service: http_status:404

The website is only accessible if I configure nginx to listen to port 80 without ssl.

But even with the encryption mode set to “full”, it still works without using ssl_certificate and ssl_certificate_key on nginx. Why is that?

And why does cloudflared only connects to the nginx server on port 80?

4

Did you create the DNS records for the tunnel?

Without any information, there’s really not much help we can provide.

5

I finally found out wha’s wrong. I only updated my tunnel config file in ~/.cloudflare/config.yml but not in /etc/cloudflare/config.yml, which cloudflared actually relies on.

Stupid mistake…

Thanks for replying though! :slight_smile:

6

I’m encoutering the same issue. I’m using cloudflared tunnel container and nginx container. They are connected to the same network. I have one backend and one frontend container also being connected to nginx. I’ve set cloudflared to route traffics to https://nginx, where nginx is the name of the nginx docker container (also the nginx address in these container environment). I’ve disable tls verification and assigned a self-signed ssl for the backend and frontend service connected to nginx but I keep getting “ERR Request failed error=“Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: first record does not look like a TLS handshake” connIndex=1 dest=https://backend.my_domain_name.com/ event=0 ip=198.41.200.73 type=http”