Meshagent wont work with Cloudflare?

[killmasta93]

Meshagent wont work with Cloudflare?

[killmasta93]

Thanks for the reply, forgot to close this as meshserver had an update for cloudflare proxy
https://meshcentral2.blogspot.com/2020/12/meshcentral-ioactive-security-review.html

[jsastriawan]

Does that proxy support Websocket? MeshAgent connection uses Secure Websocket.

[killmasta93]

Thanks for the reply, im attaching photo on cloudflare it shows this

[killmasta93]

I was reading on the Help on cloud flare it says this

Can I use WebSockets over SSL?

Yes, Cloudflare SSL fully supports WebSockets traffic passing through our network.

[killmasta93]

bump anyone else?

[masonh]

The Cloudflare proxy does TLS termination in their network, so the client will see a Cloudflare TLS certificate rather than the one configured on your MeshCentral server. As far as I know, there is no way to make Cloudflare proxy the traffic "dumbly".
You can verify whether this issue affects you by checking the MeshCentral logs, where connecting clients along with their observed/expected TLS certificate fingerprints are shown.
The solution would be to either use the same TLS certificate on your server as on Cloudflare, or set the MeshCentral TLS offload certUrl, which may also require turning off TLS in MeshCentral.
See the User Guide for more info on TLS Offloading.
Disclaimer: I haven't tried to do this myself, because of the complexity involved and my preference for keeping the TLS session private between clients and MeshCentral.