Remote Access via Cloudflare

General Discussion
1

Hi everyone. Been trying to figure this one out for a few days now and I'm struggling. I've seen some people on here have been able to access their Ignition setup over cloudflare and I kinda can, but certain things don't work.

Setup: Windows 11 Pro machine
Version: Ignition 8.1.45

I have a Cloudflare ZeroTrust tunnel setup to route to http://localhost:8088 from a subdomain of our primary domain. From this I can access the gateway in the web browser, perspective sessions in the web browser, but when I try to connect to the designer I either cannot connect to it from the address (not trying to use a port, but it automatically adds 443) like is the case tonight or I can connect, but I cannot open any resources and after a couple of minutes the connected/disconnected popup starts spamming the lower right corner of my PC. Initially I couldn't connect at all until I went to Config > Networking > Webserver > Use Proxy Forwarded Headers and set that value to True. I went down a websockets rabbit hole, but it appears to be enabled on Cloudflare and nothing seems like it should prevent a connection from what I can see.

I'm a little out of my depth here so any help is greatly appreciated.
Thanks!

2

The only thing I would say is to make sure your URL for Designer is https://your.domain.com:443 to make sure you specify both HTTPS and port 443. Then under Network -> Webserver, make sure the public address also shows the same your.domain.com domain name (this usually works without this, but this will force it to use your domain name. Also, if you have a corporate VPN, turn it off to make sure you're not fighting it with DNS records as a precaution.

1 Like
3

Excellent recommendation. I tried that, guessing ports 80 for http, 443 for https. That didn't immediately solve the issue, but your note on the DNS got me thinking. I'm not connected over any VPN, but I did figure out that I had some overzealous DNS settings on my Ubiquiti router that were causing me some issues. In the end though I was able to get it working. Many thanks!

2 Likes