17 ms·
TLS termination is neither required nor enabled by default, right?
by keehun 10mo ago
TLS termination is neither required nor enabled by default, right?
- crimsonnoodle58 10mo agoCorrect. We run it without it and just use the DNS filtering aspect.
- philipwhiuk 10mo agoHow does it do DNS filtering without TLS interception - takeover for DNS resolution?
- arcfour 10mo agoIn what way are DNS resolution and TLS related except for the little-used DoT?
- jchw 10mo agoFor tunnels many of the features basically have to work this way, so I'd be surprised if you could avoid it. It's also impossible to avoid if you use normal Cloudflare "protected" DNS entries. You can use Cloudflare as just a DNS server but it's not the default, by default it will proxy everything through Cloudflare, since that's kind of the point. You can't cache HTTP requests you can't see.