Cloudflare Architecture

Cloudflare serves as the edge proxy, CDN, and primary security layer for the entire GuildUSA infrastructure.

Core Services in Use

• DNS & Edge Proxy: All guildusa.com traffic is routed through Cloudflare's proxy (Orange Cloud). This masks our origin server IP addresses and provides DDoS mitigation.
• Cloudflare Pages: Hosts this documentation site via direct Git integration (CI/CD pipeline).
• Zero Trust (Access): Secures internal subdomains (like docs.guildusa.com) behind an explicit OTP email verification wall. Public traffic is completely blocked.
• Cloudflare R2: S3-compatible object storage used for tenant media and automated database backups.

SSL / TLS Encryption

Encryption mode is strictly set to Full (Strict). Cloudflare auto-generates 90-day Let's Encrypt certificates for the public-facing browser connections (Edge), while authenticating our servers internally using 15-Year Origin CA certificates.