SSL and network settings for Cloudflare Workers static site

Developers Workers
1

Hi, I set up a Hugo static blog served with Cloudflare Workers Sites (unlimited plan, with a KV storage). I used this walk-through as a guide, the process was pretty easy and smooth to follow. And I am very happy with the result and the performance.

As advised, I used dummy IPs for my DNS A/AAAA settings (192.0.2.255 and 2001:db8:ffff:ffff:ffff:ffff:ffff:ffff).

Since my origin is not a server but a Cloudflare KV storage, what are the good practices regarding these domain settings?

  • SSL: I am currently set on Full (strict) value. Is that OK?
  • WebSockets: it is toggle on. Should I keep, or toggle off?
  • Are there any settings I should be careful of? (I am currently on free plan)

Thank you in advance for your recommendations!

2

Generally, it should always be “Full strict” and “Full strict” only. In your case (with Worker Sites) however it does not really matter as there’ll never be a connection to an origin where that setting would matter. You should only avoid “Off” as that would disable SSL altogether. Should you ever have a connection to an origin, it should be “Full strict” as that is the only really secure mode.

Again, in a Worker Sites context irrelevant.

1 Like
3

Thank you a lot for the feedback! This is what I thought but I wanted to be sure.