We’re integrating Keycloak to a website we’re developing, and I have a question about hosting the Keycloak server. The official guide says: Keycloak is not set up by default to handle SSL/HTTPS. It is highly recommended that you either enable SSL on the Keycloak server itself or on a reverse prox…

Since you do not control the network between Keycloak and Cloudflare, do not use HTTP. It’s only okay if you control the network, but even then it’s not a good practice.

Thanks xgp. I ticked ‘Full’ in Cloudflare, and it’s giving me padlock comfort. Is it not enough? [SSL status]

It’s vastly better than doing HTTP. However, this doesn’t allow Cloudflare to verify the certificate. If you’re going to the trouble of running HTTPS on your server, why not just get a real certificate from a CA?

Really appreciate your feedback xgp. I haven’t set up https on the server; I was thinking that I could hide it behind Cloudfare and magically I wouldn’t need to configure https for keycloak. ps. I have tried configuring https for keycloack. I followed this guide , which was pretty good but some rece…

If you’re trying to avoid doing it yourself, you would need to control over the network between the reverse proxy and Keycloak. Are you running on AWS or GCP? Both of them offer reverse proxies that are designed to do this (ELB/ALB for AWS and External HTTPS Load Balancing for GCP). If you’re runnin…

Yes, the Cloudflare tunnel (cloudflared) looks like it makes a secure tunnel between your server and Cloudflare’s edge endpoints. As long as you don’t open up your server to direct access, that appears to be a good solution.

Does cloudflare provide enough security to protect Keycloak on the internet

Getting advice

fps December 21, 2021, 1:17am 7

Nice. I’m running an Oracle “always free” VM. I suspect that the cloudflared daemon is providing that secure service between my VM and Cloudflare.

Topic		Replies	Views
Keycloak with Cloudflare Tunnel not working Configuring the server	0	1138	January 25, 2023
Enabling SSL to secure the HTTP traffic of the Keycloak Server with existing certificate (avoid self-signed certificate) Getting advice	15	9881	May 17, 2021
Is HTTP-only behind reverse proxy bad practice? Getting advice	3	274	June 4, 2025
Why CloudFront didn't forward https protocol to KeyCloak	3	1482	January 18, 2021
Updating SSL certificate with Keycloak 17 Configuring the server	1	644	June 3, 2022

Does cloudflare provide enough security to protect Keycloak on the internet

Related topics