2015
Pluralsight
Troy Hunt
1:38
English

In an increasingly security conscious world, people are always looking for shortcuts to enhance the security profile of their websites whilst keeping cost and effort to a minimum. For new web assets, and particularly for old, this can be a high-friction and often costly process to get right. CloudFlare™ provides a free service that routes traffic to existing websites through their infrastructure. They've rapidly emerged in recent years to become a large player in the online world, with 5% of the globe's traffic now dependent on CloudFlare™. By encapsulating a website within their service, they're able to provide services ranging from SSL-enabling sites to implementing firewall rules and security controls, all without touching the existing site. In this course, we'll look at CloudFlare's™ free service, which can be set up in minutes. Whether you're just trying to get SSL on your site or want to take advantage of the more advanced security features CloudFlare™ offers, this course is a great way to increase security in the fastest, cheapest way possible.

The CloudFlare™ Model
Overview
The CloudFlare™ Model
The Rise and Rise of CloudFlare™
CloudFlare™ Free Security Features
Summary
Setting Up a New Site
Overview
Introducing the Site
Adding a New Site to CloudFlare™
Changing Nameservers
Testing the Configuration
Summary
Getting SSL for Free
Overview
SSL as a Premium Service
Understanding SSL on CloudFlare™
Testing the Site Over HTTPS
Checking the SSL Configuration with Qualys SSL Labs
Understanding Flexible, Full, and Strict SSL
Implementing Full and Strict SSL
Forcing HTTPS with a Page Rule
Enabling HTTP Strict Transport Security (HSTS)
Summary
Managing the Firewall
Overview
Understanding Threats and Responses
Setting the Security Level
Managing Access Rules
Securing a URL with a Page Rule
Browser Integrity Check
How to Think of CloudFlare's™ Firewall
Summary

Download File Size:167.6 MB

---