Google Cloud Run + Cloudflare

Question

Is it possible to link a CNAME record to a cloud run domain with the proxy functionality enabled on Cloudflare? I'm getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH. When I disable the proxy functionality it's working but I want to make use of the more advanced proxy features. Is there some way to bypass this easily?

Answer 1

To achieve this:

1. Select a Cloud Run zone where managed domains are available. Domain mapping is available in the following regions:

   • asia-east1
   • asia-northeast1
   • asia-southeast1
   • europe-north1
   • europe-west1
   • europe-west4
   • us-central1
   • us-east1
   • us-east4
   • us-west1

2. Deploy your Cloud Run service.

3. Add your custom domain linked to your cloud run service. More info here

4. Disable the Proxy option in Cloudflare initially, or Google will encounter issues when creating the certificate.

5. Enable full SSL/TLS encryption to avoid excessive redirects and ensure the domain functions correctly. You can do this in Cloudflare under "SSL/TLS" -> "Overview" -> "Full."

6. Enable the Proxy option in Cloudflare.

After completing these steps, your setup should work without experiencing an infinite redirect loop or ERR_SSL_VERSION_OR_CIPHER_MISMATCH error.