# Te whakamahi i Cloudflare i tetahi atu Proxy Tahi me Kapsule

Source: https://support.kapsulehost.com/mi-nz/using-cloudflare-with-kapsule

# Whakamahi i te Cloudflare, i tētahi atu Proxy rānei me KapsuleHost

Me pēhea te whakatū i tētahi proxy pūtaiao tē toru, i tētahi CDN rānei i mua i tētahi paetae KapsuleHost, tae atu ki ngā whakatakotoranga e rua e whakamate ai i ngā paetae, ngā tuhinga e kore e tika kia whakatūpurihia, me pēhea te wetewete i tēnā.

Ko KapsuleHost he kaikawe āna ake ingoa tūmataiti (nameservers) me āna ake kupu tūmataiti o te ao (global edge network), nō reira ko te nuinga o ngā mea e tuku mai ana tētahi proxy pūtaiao kei konei kē, i runga tahi me te āwhina. Kāore e harikoa kia whakatū tētahi i mua mēnā e hiahia ana koe. E whakaatu ana tēnei whārangi me pēhea, me ngā āhuatanga e whai ake.

> **Note:** Mēnā ka hiahia noa koe i te whakatapui me tētahi pae tūmataiti o te ao, whakamahi i Kapsule CDN. Ka piri atu ki te paenui, ka mau tonu ngā tukunga IP a te kaihokohoko, ā, e kore e hihi i tētahi pūkete tē ōkawa. Tīheia [Te Whakahauora i te CDN](https://support.kapsulehost.com/mi-nz/cdn-enabling).

## Ngā Mea e Riro ai i a Koe me Ngā Mea e Tuku ai

| E riro ai i a koe | E tuku ai |
|---|---|
| Tō rātou taiepa, ngā ture tūreture me te whakatapui whakatupuranga | Te tukunga IP o te kaihokohoko pono i ā mātou taha, e te ōtautahi |
| Tō rātou papaboard whakaohooho | Te whakatokumea pono o te whakatōpū whenua me te whakatōpū IP i KPanel |
| Te whakakohukohuki DDoS ki tō rātou pae | Tētahi wāhi anake hei whakahaere i te DNS, te SSL me te whakatapui |
| Ngā ture whārangi me ngā tūtakitaki pae | Ā mātou kaha ki te wetewete i te huarahi tono katoa mō koe |
| Tētahi waahanga whakatapui tuarua, mēnā e hihi ana koe | Kapsule CDN, me whakaweto e koe |

Ko te neke mō tētahi āhuatanga e whāngai noa koe, e hihi ai, he āhuatanga pai. Ko te neke nā te mea i kīa e tētahi pokapū karere he mea tūturu ā-āhuatanga tōkeke mō tētahi tūkaha.

Kia mōhio koe ko te Cloudflare e tonoa ana koe kia tuku i te rohe katoa ki ā rātou ingoa tūmataiti i ā rātou mahere Free me Pro: ko te whakatū katoa (te tuatahi) anake te kōwhiringa e whai ake ai, ā, ko te CNAME (waahanga), e tukutuku i tētahi ingoa ira anake, kei te āwhina anake i runga i ngā mahere Business me Enterprise. I runga i te mahere whakakitea, e kore koe e tukutuku i tētahi ingoa ira kotahi, ā, ka waiho i te tonutanga o tō DNS me mātou. Ko te neke i ō ingoa tūmataiti he neke i te katoa: ngā tuhinga paetae, ngā tuhinga pokapū, ngā tuhinga manatoko, te katoa.

## Ngā Whakatakotoranga e Rua e Whakamate ai i te Katoa

### 1. Whakamahi i te Full (Strict) SSL, Ā, Kāore i te Flexible

He tohu tūturu, pūmautanga o te katikati he tohu tika i tō paetae KapsuleHost, ā, ka tūtaki i te HTTP pūtea ki te HTTPS i te pūtake.

Mēnā kua whakatakoto a tō proxy ki te **Flexible** SSL, ka kōrero ā-HTTP pūtea ki tō pūtake. E tūtaki ana tō pūtake ki te HTTPS. Ka tiki anō te proxy i runga i te HTTP. Nei ā nei. Ka kite ngā kaitihe i `ERR_TOO_MANY_REDIRECTS` ā, he paetae kore whaipainga.

Whakatakoto te ahumahi SSL ki te **Full (strict)**. He tohu tika, pūmautanga o te katikati tō tohu pūtake, nō reira ka haere pai te manatokotanga matatikitiki. Ko tēnei te take nui rawa i puta ai tētahi paetae i te wā i whakahia ake ai tētahi proxy.

### 2. Kāore e Pā i te Huarahi Horopūranga Tohu

Ko ngā tohu e whakaputa, e whakahou ai mā te whakapaetai o te whakahaere i te rohe i runga i te HTTP pūtea, i `/.well-known/acme-challenge/`. Me u taua tono ki te pūtake KapsuleHost, ā, me whakahoki atu i te tino whakautu. Kā āhuatanga katoa i te proxy e pā i te tohu ka whakamate i te whakaputa, ā, i muri i te toru marama, ka whakamate i te whakahōu:

- Te whakatūraru tūreture, te ahumahi "i raro i te whawhai", i tētahi whakakaha whakahaere rānei e whakapaetai ana i tētahi whārangi whakaharinga.
- Te taiepa, ngā ture āhuatanga, ngā ture whārangi rānei e ohuohia ai i te huarahi, i te tohu kaiwhakamahi rānei, i te whakarewatanga huarahi rānei.
- Te whakatapui e whakaputa ai tētahi 404 tawhiti mō te huarahi horopūranga.
- Te whakatikanga o te HTTPS i runga i te huarahi horopūranga ake, i mua i te tohu e mau ai.

Tāpiri tahi ture orokohanga e whakakahohi atu i `/.well-known/` mai i ia tētahi o aua āhuatanga.

> **Warning:** Ko tēnei whakakore he whakatupu, he pāmamae. E pai ana te whakaputa i tēnei ā, engari i muri i te tata rima tekau ma rua rā, ka pāngia noa te whakahōu, ā, i tētahi ata ka kite ngā kaihokohoko katoa i te whakatūraru tohu. Mēnā ka whakahia ake e koe te whakatūraru tūreture i muri, tāpiri atu te whakakahohi i te wā kotahi.

Ko ngā tohu e tonoa ana mā te KapsuleHost e whakapaetai ai mā te DNS, nō reira e kore e pā te proxy ki aua mea. Tīheia [Ngā Tohu SSL](https://support.kapsulehost.com/mi-nz/ssl-certificates).

## Te Neke i ō DNS ki te Cloudflare

**Tahe 1: Kōpii i ō tuhinga inaianei.** Whakatūtuki i te **DNS** tab mō tō paetae i KPanel, ā, tuhituhia ngā tuhinga katoa: momo, ingoa, uara, whakatupuranga. Kāore e maroke i ngā mea e kore koe e maatau. Ko ngā tuhinga manatoko pūtaiao o tē toru tekau me ngā tuhinga pokapū i raro nei he mea e ngaromia e ngā tāngata. E kore e mau tika te mea whakaeke ā-tūturu, nō reira ko tēnei rārangi tō mea e waihangaia ai ki te whakaeke, ā, tō mea e whakahokia ai i muri.

**Tahe 2: Tāpiri i te rohe, ā, waihangaia te whakaeke.** Tāpiri i te rohe ki te Cloudflare, ā, waiho ia kia rapuhia tō DNS. Whakataurite i te hua, i a ia ia, ki tō rārangi, ā, tāpiri i te ringa i ngā mea ngoikore. Me orite tino ngā uara, tae atu ki ngā ira whakamutunga, me te whakatahinga i ngā tuhinga `TXT`.

**Tahe 3: Whakatau he aha ka whakatūpurihia.** Kei ia tuhinga he tūtira whakatūpuranga, i te nuinga he arero ōrange, ōkakā rānei. Ko te whakatūpuranga he mea kia haere ai te whakawhiti mō tērā ingoa ira mā rātou kupu tūmataiti; te kore whakatūpuranga he mea kia whakatika tika ai te DNS ki te tukunga pono. Whakatūpuru anake ngā tuhinga e whakapaetai ana i te whakawhiti paetae. Ko te waahanga e whai ake nei te rārangi tino tūturu.

**Tahe 4: Hurihia ngā ingoa tūmataiti.** I te wā anake ka tika ngā tuhinga, tohu ake i te rohe ki ngā ingoa tūmataiti e hoatu ana e te Cloudflare. Mēnā kua rehita te rohe me te KapsuleHost, whakamahi i te whārangi **Nameservers**, i whakawhitiwhiti i [Ngā Ingoa Tūmataiti](https://support.kapsulehost.com/mi-nz/nameservers). Ka hoki noa, whakamahi i te paenui o tō rehiterer. E tata ana te takohanga ki ngā miniti, ki ngā haora e kite ai i te katoa.

> **Warning:** Kāore e mukua te rohe i KPanel i muri i te neke iho. Kei tō ake koa te mau, ā, ko tēnei tō whakaiti e whakahoki ai mēnā he kino te neke.

## Ngā Tuhinga e Kore e Tika kia Whakatūpurihia

E kore te whakatūpuranga i tētahi tuhinga ehara i te whakawhiti paetae te whakapānga. E whakakapi atu i te whakautu me te tukunga o te proxy, nō reira ka mutu te mahi o te mahi i te taha kē.

| Tuhinga | Whakatūpuranga? | He aha te take |
|---|---|---|
| Rohe kore me `www` | Ae, mēnā e hiahia ana koe i te proxy | Ko tēnei te whakawhiti paetae |
| `MX` tuhinga | **Kāore** | E kore te proxy e mau i te SMTP. Ka whakamate i te pokapū e tae ai |
| Te ingoa ira e tohu ana te MX | **Kāore** | Me whakatika tika ki te tūranga pokapū pono |
| `SPF`, `DKIM`, `DMARC` | Kāore he tūtira | Whakatukua kia orite tino |
| Autodiscover me te autoconfig | **Kāore** | E hihi ana te pokapū kaihokohoko i te tūranga pono |
| `SRV` tuhinga | Kāore he tūtira | Me orite tino |
| Rohe ira e tohu ana ki tētahi kaihāpai ē atu | **Kāore** | E hinahina ana te whakatūpuranga i muri i te tukunga he atu |

Ko te ture i raro: whakatūpuru anake ngā ingoa ira e whakapaetai ana i te HTTP me te HTTPS ki ngā kaitihe, ā, kaore he mea ē atu.

## Te Mau Tonu i ō Pokapū

Ko te pokapū te mate nui rawa i te neke ingoa tūmataiti, ā, e kore tonu e pānuihia mō tētahi, e rua rānei ā-rā, nā te mea e mutu anake te pokapū e tae ai, kaore he hē kitea.

Mēnā kei te KapsuleHost ō pūkete pokapū, me pono ngā mea e whā i muri:

1. **Ko te `MX` tuhinga kei reira, kaore whakatūpurihia**, e tohu ana ki `mail.kapsulehost.com` me te whakatupuranga 10.
2. **Ko te `SPF` he tuhinga kotahi.** E whāngai tahi anake i tētahi rohe. Ko ā mātou āhua `v=spf1 include:_spf.kapsulehost.com ~all`. Mēnā ka tuku ōu pokapū mā tētahi mahi ē atu, me whai āna tūranga i roto i tērā tuhinga, kaore i tētahi tuarua.
3. **I tae mai ngā `DKIM` tuhinga katoa.** Ko ia rohe he tohu hinahina āna, e whakaputa ana i `TXT` tuhinga i raro i `_domainkey`. He nui ake i tētahi, ā, ka whakamate te pokapū tohu i te tohu kāore ai tōna tuhinga manatoko.
4. **I tae mai te `DMARC`.** Ko te `_dmarc` tuhinga e kī atu ai ki ngā tūranga e tae mai, he aha te mahi ki te pokapū kaore i pono ai i ngā whakamatautau i runga.

Ko te **Deliverability** tab i tētahi pūkete e whakaatu nei i ngā mea kei te whakaputa nei, i ngā mea ngoikore, me ngā uara tika kia kōpii. Waihangaia i muri i te takohanga o ngā ingoa tūmataiti. E whakamarama ana [SPF, DKIM me DMARC Whakamārama](https://support.kapsulehost.com/mi-nz/spf-dkim-dmarc) i ngā mahi o ia tuhinga.

Ko te pokapū e tonoa, e tukua ai i te tukunga ingoa ira o te pokapū pono, kaore i raro i te proxy. Kaore e rereketanga i ō whakatakotoranga kaihokohoko pokapū.

## Ngā Mea e Tuku ai: Te Tukunga IP o te Kaihokohoko Pono

E pānui ana KapsuleHost i te tukunga IP pono mai i tētahi header tuku, ā, anake i te wā i tae mai i ā mātou taha pae tūmataiti, i te mīhini ake rānei. Ko ngā puna ē atu kaore e tūturuwhia, harikoa, nā te mea e taea te tuku header te whakapaetai e tētahi. Kaore te proxy pūtaiao i te rārangi whakawhitinga, ā, kaore he āhua e āwhina ana.

Nō reira ko ia āhuatanga e tīpako ana i te tukunga IP o te kaihokohoko e kite ai te proxy:

| Āhuatanga | He aha ka puta |
|---|---|
| Pūtake arokite | Ka tuhituhia te tukunga o te proxy, kaore o te kaihokohoko |
| Whakaohooho paetae | Ka tohua te whakawhiti ki te proxy |
| Whakatōpū whenua | Whakatōpu whenua i te pae tūmataiti o te proxy, nō reira he hē ngā ture whenua |
| Ō rārangi kaiāta IP | E kore e taea te whakatōpū i tētahi kaihokohoko e kore koe e kite |
| Te whakatōpū pikinga āhumahi | E kite ana i te proxy |
| Ngā plugin haumaru WordPress | Ko te whakatapui tāpiri me te tātarihanga whakaaro he hē whakamahinga |

He putanga nui ake. E whakapae āhuatanga te āhumahi ka whakatōpū i ngā tukunga e puta i te papamatau hapa, i ngā arai tukurua rānei. I muri i te proxy, kei te tukunga proxy i te katoa aua āhuatanga, nō reira kaore i tē ita i tē taha kaihokohoko e taea te whakatōpū i tēnei pae tūmataiti o te proxy, ā, ka takihi i te katoa e haere ai. E kore mātou e tika ake i tō taha.

## Kāore e Whakahe i Ngā CDN e Rua

Te whakahaere i Kapsule CDN me tētahi proxy pūtaiao ki mua kaore e rua whakamiharo. E hoatu he whakatapui e rua kaore e whakaae, e rua huinga purge rules, ā, he raru tino uaua ki te wetewete.

He tohu ā-āhuatanga ano: ko te whakahauora i Kapsule CDN e tonoa ai i ā mātou pae tūmataiti kia whakaputa tohu mō tō ingoa ira, e tonoa ai kia whakatika tō ingoa ira ki ā mātou pae. Mēnā e tohu ana te DNS ki tētahi proxy pūtaiao, kaore e whakaputa atu tērā tohu, ā, e mutu noa te CDN.

Kōhiti kotahi. Mēnā e hiahia ana koe i a rātou, whakaweto i Kapsule CDN i mua, i mua i te neke o ō ingoa tūmataiti. Mēnā e hiahia ana koe i ā mātou, whakaweto te proxy. E tuhi te whakahauora i Kapsule CDN i ngā tuhinga pae e tonoa ai mō koe, ā, anake i te wā e mau ana tō DNS me mātou; kaore noa, e tuhi koe ake mā te ingoa pae i te CDN tab.

![Te whārangi Kapsule CDN mō tētahi paetae i KPanel](https://support.kapsulehost.com/help/screenshots/using-cloudflare-with-kapsule.b7b43ee5.webp)

## Te Hoki Mai ki te Kapsule DNS

1. Whakatūtuki i te **DNS** tab i KPanel, ā, waihangaia me orite ngā tuhinga ki ngā mea kei te mau tonu i te proxy. Tāpiri i ngā mea i hangaia e koe i reira i te wā i haere koe.
2. Whakaweto te tūtira whakatūpuranga i ia tuhinga i te mahi pūtaiao, kia whakaatu i te rohe ngā tukunga pono. Whakapaetai ko te paetae e tika tonu.
3. Hurihia ngā ingoa tūmataiti i tō rehiterer ki `ns1.kapsulecloud.com`, `ns2.kapsulecloud.com`, `ns3.kapsuledns.com` me `ns4.kapsuledns.com`.
4. I te wā kua neke ai te takohanga, whakapaetai ko te paetae e tika ai mā HTTPS me tētahi tohu tika.
5. Waihangaia te **Deliverability** tab i tētahi pūkete, ā, whakapaetai ko ngā tuhinga pokapū kei reira.
6. Whakahauora anō i Kapsule CDN mēnā e hiahia ana koe, ā, whakapaetai ko te tohu e whakaputa.

> **Note:** Mēnā kua whakahauora te DNSSEC i te proxy, whakaweto, ā, tatari kia mutu te whakawhakaatu i te tuhinga takohanga DNSSEC pūtake. Te neke i ngā ingoa tūmataiti i te wā kei te whakaputa ana tētahi tohu tawhiti he mea ka whakakahore i te rohe i te katoa. Tīheia [DNSSEC](https://support.kapsulehost.com/mi-nz/domains-dnssec).

## Kāore i te Tika

- **`ERR_TOO_MANY_REDIRECTS`**: Ko te ahumahi SSL ko Flexible. Hurihia ki Full (strict).
- **Tohu kua mate, kaore e tika**: Ka whakatōpua te whakahōu. Tāpiri i te `/.well-known/` whakakahohi, ā, ka whakaputa anō mai i te paenui. Tīheia [Ngā Tohu SSL](https://support.kapsulehost.com/mi-nz/ssl-certificates).
- **Ka mutu te pokapū e tae ai**: Ko te `MX` tuhinga ngoikore, whakatūpurihia, i tohu ai ki te tūranga he atu. Tīheia [Kaore te Pokapū e Tae](https://support.kapsulehost.com/mi-nz/email-not-receiving).
- **Ko te pokapū e tonoa ai, engari e haere ai ki te pūkete whakaputa**: Kaore i tae tētahi `SPF`, `DKIM`, `DMARC` tuhinga. Whakatikatika i ngā mea e tohua ana e te **Deliverability** tab. Tīheia [He Aha i Haere ai Ōku Pokapū ki te Pūkete Whakaputa?](https://support.kapsulehost.com/mi-nz/email-spam-sending).
- **Kaore e kitea ngā hurihanga**: Ngā whakatapui e rua. Pureia ngā tokorua, ā, waihangaia ki tētahi matapihi āhuatanga.
- **E kore ētahi kaihokohoko e taea te u ki te paetae, e taea ai ē atu**: Tino tohu he whakatōpū tūturu i tētahi pae proxy. Tīheia [Te Whakatūtuki i tētahi Tohu Āwhina](https://support.kapsulehost.com/mi-nz/opening-a-support-ticket).
- **Ka mutu te whakatika o te rohe i muri tonu i te hurihanga ingoa tūmataiti**: I te nuinga he tuhinga takohanga DNSSEC tawhiti. Tonoa ō rehiterer kia mukua.
- **Ngā whakatūraru whakawhiti hui**: Kaore i te harikoa i te proxy, ā, e kite tonu i te wā kotahi. Tīheia [Te Whakatikatika i te Whakawhiti Hui](https://support.kapsulehost.com/mi-nz/ssl-mixed-content).

## Ngā Aratohu e Pā atu

- [Te whakahohe i Kapsule CDN ki tō pae](https://support.kapsulehost.com/mi-nz/cdn-enabling)
- [Te pure i te keteroki Kapsule CDN](https://support.kapsulehost.com/mi-nz/cdn-cache-purge)
- [Te Whakarereke i ngā Nameserver hei Tohu i tō Domain ki Kapsule](https://support.kapsulehost.com/mi-nz/nameservers)
- [Kapsule DNS Ngā Pūtake: A Records, MX, CNAME, me te TXT Whakamaramatia](https://support.kapsulehost.com/mi-nz/dns-basics)
- [Te Haumarutanga: He Aha te Tuatahi](https://support.kapsulehost.com/mi-nz/security-overview)
- [Papakupu Maumahara Kaupapa: Ia Kupu Whakamarama](https://support.kapsulehost.com/mi-nz/glossary)