We currently use Cloudflare to handle our DNS. Currently we do our own SSL which works fine on root domain but we also host large downloads on a variety of servers such as dl1.mydomain dot com, dl2.mydomain dot com etc. We want to use Cloudflare https solution for these dl1.mydomain dot com servers.
My questions are:
Is it mandatory to use dynamic DNS proxy on download servers such as dl1.mydomain dot com for the Cloudflare https product to work?
Will large file transfers e.g. 1GB - 5GB take longer to download / be slower if traffic is run through Cloudflare https solution? I’m unsure if the entire file goes from dl1.mydomain dot com/file1.zip → cloudflare → customer PC or whether Cloudflare just encrypts the connection between dl1.mydomain dot com/file1.zip and customer PC?
I believe it depends on the network speed at the host/origin and the end-user more than on the Cloudflare edge (which I am not sure if it should cache and hold that big files?).
If using it only for zip/rar/tar files, videos, or non-web content, I am afraid you should have to worry a bit about it due to ToS.
Use of the Service for the storage or caching of video (unless purchased separately as a Paid Service) or a disproportionate percentage of pictures, audio files, or other non-HTML content, is prohibited.
Cloudflare is not meant to replace the CDN you use for huge ZIP files/non-web files. Moreover, there could be some limits too. In case if needed, you would need to either increase you usage limit by purchasing the needed features if so.
The maximum file size Cloudflare’s CDN caches is 512MB for Free, Pro, and Business customers and 5GB for Enterprise customers. Enterprise customers can contact their Cloudflare Account Team to request caching of larger files.
I hope you are not thinking about using a Flexible SSL option at Cloudflare for your sub-domain(s) (hostname DNS records at Cloudflare dashboard) while having the files stored on some storage location without an proper SSL certificate?
Maybe I am wrong about it all but, kindly and patiently wait for another reply to be sure about it.