Question Cloudflare for Saas
Hello,
a friend of mine wants to secure websites for his customers with ddos protection, so i wanted to ask if cloudflare is a option and if this is allowed. E.g. The website is abc.com is it allowed that he offers customer.abc.com via cloudflare which would be his customers website and the customer would create a cname record from e.g. customer.com to customer.abc.com, so now his website would be secured over cloudflare?
I saw that something like cloudflare for saas exsits and this would be very similar.
Is this even possible with the cname record? Is this allowed? Which plan is needed for something like that?
Thanks!
1 Reply
Cloudflare for SaaS is pretty much that yea: https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/
Except there's a few hiccups with using it for entire websites. I'm assuming he wants his customers to be able to proxy their normal origins? With non-enterprise cf for saas you can only have one fallback origin/destination for all your hostnames. With Enterprise you can specify that per hostname.
Also CNAMEs aren't allowed on roots (customer.com), so you'd have to use a provider which flattens them for you (Cloudflare does, some DNS providers call this ALIAS/ANAME records), or get Enterprise apex proxying: https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/start/advanced-settings/apex-proxying/#_top