Welcome to JPPM Cloudflare TOT Session

16 August 2025

Cloudflare: Web Infrastructure & Security

A global-scale company protecting more than 26 billion Internet Properties with a network spanning 290+ cities in 100 countries.

290+
Cities
100
Countries
192
Tbps Network

About Cloudflare

Founded in 2009, Cloudflare is a global company focused on web infrastructure and security protection.

Global Network

192 Tbps of network capacity spans more than 290+ cities in 100 countries around the world.

Security Solutions

Protection against DDoS attacks, Web Application Firewall to stop hacking attempts, and more security features.

Performance

Content Delivery Network to make websites load faster, Image Compression, Load Balancer, and more optimization tools.

Global Network Map
Network Locations
Data Center
Headquarters
0
Total Locations
0
Visible Locations
0
Countries

How Cloudflare Works

Cloudflare acts as a reverse proxy, protecting and accelerating your web applications.

Non-Proxy (DNS Only)
With Proxy
Cloudflare Tunnel

Non-Proxy (DNS Only)

In this mode, Cloudflare only handles DNS resolution. Users connect directly to your server without any protection or optimization.

User

Makes DNS query

DNS Server

Returns server IP

Web Server

Returns content directly

Note: No protection & optimization on your website. Attackers will reach your origin server directly.

With Proxy

When proxy is enabled, Cloudflare sits between users and your server, providing security, performance, and reliability.

User

Requests content from Cloudflare IP

Cloudflare

Blocks threats & optimizes content

Web Server

Returns content to Cloudflare

Benefits: CDN, WAF, DDoS Protection, optimization, etc. Attacks are blocked at Cloudflare's network.
Note: Attacks are still possible with the knowledge of server IP address (bypass Cloudflare). Non-HTTP traffic not allowed.

Cloudflare Tunnel

Cloudflare Tunnel creates a secure, encrypted connection between Cloudflare and your server without exposing your public IP.

User

Requests content from Cloudflare IP

Cloudflare

Blocks threats & optimizes content

Cloudflared

Secure tunnel to server

Web Server

Returns content via tunnel

Benefits: Blocks all inbound port 80 & 443 to server. Attackers can't directly attack the server IP address.

SSL Connections

Understanding how SSL certificates work with Cloudflare's proxy service.

User

Cloudflare SSL Certificate

Cloudflare

Server SSL Certificate

Web Server

Question 1: How many SSL certificates are needed based on the diagram?

Question 2: How many SSL (HTTPS) connections are needed to establish a full secure connection?

Note: ROS decided to use their own custom SSL certificate purchased from GlobalSign, SSLCorporation and upload it to the Cloudflare network, so all users will still see the GlobalSign and SSLCorporation certificate even if the traffic is now served by Cloudflare.

HTTP Status Codes: For troubleshooting HTTP status codes, visit this link.

Support & Contact

Get help from Forest Interactive Support team or Cloudflare directly.

Level 2 Support

Established based on project deployment team. On-site support can be done only in this level.

Team: Amiruddin, Faqihah

Contact Team

Level 3 Support

When the issue is related to product/feature bug or anything that can't be resolved by Forest Interactive.

Escalate Issue

WhatsApp Group

For (relatively) urgent/critical assistance from our team.

Join Group

Emergency Contact

For immediate support from our team.

Call Now

Other Support Channels by Cloudflare

Email Support

Contact Cloudflare Support Team directly via email.

Live Chat

Chat with Cloudflare Support representatives in real-time.

Documentation

Access support articles and developer documentation.