A Cloudflare Proxy and TLS Demonstration

I mentioned in a previous post that using Cloudflare’s reverse proxy services (such as “tunnels” or “proxied domains”) comes with certain security and privacy implications. Essentially, to function as a reverse proxy, CF must be able to intercept and decrypt your traffic. This Man-In-The-Middle position gives CF the ability to hypothetically capture or alter your traffic without any obvious indication.
In this post, I’d like to demonstrate how that would work.

Maintenance Page

I will be relocating my servers again in the next few months. These servers host this blog, a couple websites, my Fediverse server, and various internal services. My internal services will simply be down during this process, but for the external-facing services, I wanted something a little more elegant. Namely, a proper maintenance page.

Adventures in mTLS

For a while now, I’ve followed a pretty strict rule: public services are public, and private services are private.
For me, that meant that the only things on my network that were exposed to the public internet are my blog and public websites. Private services, like Home Assistant or Navidrome, are only accessible from my local network (or remotely via VPN).

Today I changed that a bit…

The "Every Ham" Radio Contest

I love the concept of radio communication; from playing with 27mhz “walkie talkies” as to kid, to CB and LMR as a teen, and then finally licensed amateur radio as an adult.

I’m just a nerd; learning about and experimenting with radio frequencies is just plain fun.