Cloudflare Application Services
통합 교육

Type: A
Name: @
IPv4 address: 20.88.188.200
Proxy: yes
Comment: Lab origin server

dig logical-voyager.sxplab.com A

; <<>> DiG 9.10.6 <<>> +noquestion +nocomments adjective-noun.sxplab.com A
;; global options: +cmd
logical-voyager.sxplab.com. 300 IN  A   104.18.24.205
logical-voyager.sxplab.com. 300 IN  A   104.18.25.205

nslookup logical-voyager.sxplab.com

Server:    127.0.2.2
Address:   127.0.2.2#53

Non-authoritative answer:
Name:    logical-voyager.sxplab.com
Address: 104.18.24.205
Name:    logical-voyager.sxplab.com
Address: 104.18.25.205

openssl s_client -connect sub1.logical-voyager.sxplab.com:443 \
  | openssl x509 -noout -ext subjectAltName

depth=2 C=US, O=Google Trust Services LLC, CN=GTS Root R4
verify return:1
depth=1 C=US, O=Google Trust Services, CN=WE1
verify return:1
depth=0 CN=adjective-noun.sxplab.com
verify return:1
X509v3 Subject Alternative Name:
    DNS:adjective-noun.sxplab.com, DNS:*.adjective-noun.sxplab.com

openssl s_client -connect sub2.sub1.logical-voyager.sxplab.com:443

CONNECTED(00000006)
40F8F7F201000000:error:0A000410:SSL routines:ssl3_read_bytes:
ssl/tls alert handshake failure:ssl/record/rec_layer_s3.c:908:
SSL alert number 40
---
no peer certificate available

openssl s_client -connect sub2.sub1.logical-voyager.sxplab.com:443 \
  | openssl x509 -noout -ext subjectAltName

X509v3 Subject Alternative Name:
    DNS:adjective-noun.sxplab.com,
    DNS:*.adjective-noun.sxplab.com,
    DNS:sub2.sub1.adjective-noun.sxplab.com

https://logical-voyager.sxplab.com/.git/secrets.txt

https://logical-voyager.sxplab.com/.git/secrets.txt

for i in {1..10}; do
  curl -svo /dev/null \
    "https://logical-voyager.sxplab.com/services/safes/" 2>&1 \
    | grep "< HTTP.* "
done

< HTTP/2 200
< HTTP/2 200
< HTTP/2 200
< HTTP/2 200
< HTTP/2 200
< HTTP/2 429
< HTTP/2 429
< HTTP/2 429
< HTTP/2 429
< HTTP/2 429

for (($i = 0); $i -lt 10; $i++) {
  try {
    $Response = Invoke-WebRequest -Uri "https://logical-voyager.sxplab.com/services/safes/"
    $StatusCode = $Response.StatusCode
  } catch {
    $StatusCode = $_.Exception.Response.StatusCode.value__
  }
  "#$i - $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') - $StatusCode"
}

curl -I "https://logical-voyager.sxplab.com/hellobots"

< HTTP/2 403
< date: Thu, 26 Oct 2023 14:27:56 GMT
< content-type: text/html; charset=UTF-8
< content-length: 4512
< server: cloudflare
< cf-ray: 81c362047fbe45a0-LHR

Invoke-WebRequest -Uri "https://logical-voyager.sxplab.com/hellobots" -method HEAD

Invoke-WebRequest: Response status code does not indicate success: 403 (Forbidden).

curl -I "https://logical-voyager.sxplab.com/services/luggages/"

< HTTP/2 200
< date: Thu, 26 Oct 2023 07:42:38 GMT
< content-type: text/html
< x-origin: origin-1
< cf-cache-status: DYNAMIC
< server: cloudflare
< cf-ray: 81c110540d6823ab-LHR

curl -I "https://logical-voyager.sxplab.com/services/luggages/"

< HTTP/2 200
< x-origin: origin-2
< cf-cache-status: MISS
< server: cloudflare

< HTTP/2 200
< x-origin: origin-2
< cf-cache-status: HIT
< age: 19

< cf-cache-status: REVALIDATED

curl -I "https://logical-voyager.sxplab.com/services/arrows/"

< HTTP/2 200
< x-origin: origin-2
< cf-cache-status: HIT
< age: 3

curl -I "https://logical-voyager.sxplab.com/services/doesnotexist/"

< HTTP/2 404
< cf-cache-status: MISS

< HTTP/2 404
< cf-cache-status: HIT
< age: 73

Origin 1:   52.191.5.18
Origin 2:   52.170.37.97
Legacy LB:  20.88.188.200   ← 본 실습에서는 사용하지 않음

curl --head 52.191.5.18
curl --head 52.170.37.97

Name      IP             Weight
origin-1  52.191.5.18    1
origin-2  52.170.37.97   1

while true; do
  curl -s --head https://lb.logical-voyager.sxplab.com | grep -i x-origin
done

X-Origin: origin-2
X-Origin: origin-2
X-Origin: origin-1
X-Origin: origin-1
...

X-Origin: origin-2
X-Origin: origin-2
X-Origin: origin-2
...

curl -I "https://logical-voyager.sxplab.com/services/luggages/"

HTTP/2 200
date: Fri, 24 Jan 2025 04:36:50 GMT
content-type: text/html
x-origin: origin-1
cf-cache-status: DYNAMIC
x-frame-options: SAMEORIGIN
some-other-header: Hello
server: cloudflare

HTTP/2 200
x-origin: origin-1
cf-cache-status: DYNAMIC
referrer-policy: same-origin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
server: cloudflare