looking for a server admin to protect server with cloudflare
Budget: €100 – €120 EUR
im looking for an experienced server administrator with in-depth knowledge of Cloudflare and server security. The main task is to ensure that our server is fully protected using Cloudflare, ensuring that all open ports are safely closed, and making it impossible for outsiders to determine the backend IP.
Project Goals:
Configure and optimize Cloudflare settings for best security practices.
Ensure that all unnecessary open ports on the server are securely closed.
Implement measures to hide the backend IP, preventing its detection.
Set up server security to block scanners like Shodan, Censys, and similar platforms.
Required Expertise:
Solid experience in server administration, particularly with Linux-based systems.
Comprehensive understanding of Cloudflare and its features.
Familiarity with server security best practices and tools.
Experience in dealing with common vulnerabilities and potential threats.
Technical Specifications:
Cloudflare Configuration:
Ensure SSL/TLS encryption is properly configured.
Implement HTTP/3 and 0-RTT.
Use Cloudflare's Web Application Firewall (WAF) to protect against common threats.
Enable rate limiting for potential abusive IPs.
Server Configuration:
Ensure that the server is updated with the latest patches.
Close all ports that are not in use and secure necessary ports using strict firewall rules.
Set up intrusion detection systems (IDS) and intrusion prevention systems (IPS) to monitor and block suspicious activities.
Backend IP Protection:
Implement Argo Tunnel or similar techniques to ensure the backend IP is hidden.
Use Cloudflare's "Under Attack" mode during potential DDoS situations.
Blocking Scanners:
Identify and block common user-agents used by scanning tools.
Implement honeypots to mislead and detect scanners.
Project Goals:
Configure and optimize Cloudflare settings for best security practices.
Ensure that all unnecessary open ports on the server are securely closed.
Implement measures to hide the backend IP, preventing its detection.
Set up server security to block scanners like Shodan, Censys, and similar platforms.
Required Expertise:
Solid experience in server administration, particularly with Linux-based systems.
Comprehensive understanding of Cloudflare and its features.
Familiarity with server security best practices and tools.
Experience in dealing with common vulnerabilities and potential threats.
Technical Specifications:
Cloudflare Configuration:
Ensure SSL/TLS encryption is properly configured.
Implement HTTP/3 and 0-RTT.
Use Cloudflare's Web Application Firewall (WAF) to protect against common threats.
Enable rate limiting for potential abusive IPs.
Server Configuration:
Ensure that the server is updated with the latest patches.
Close all ports that are not in use and secure necessary ports using strict firewall rules.
Set up intrusion detection systems (IDS) and intrusion prevention systems (IPS) to monitor and block suspicious activities.
Backend IP Protection:
Implement Argo Tunnel or similar techniques to ensure the backend IP is hidden.
Use Cloudflare's "Under Attack" mode during potential DDoS situations.
Blocking Scanners:
Identify and block common user-agents used by scanning tools.
Implement honeypots to mislead and detect scanners.