Cloudflare Account

Metric	Target
RPO	n/a (no backups possible)
RTO	8 hours (only edge affected)

Cloudflare is used to facilitate communications for CrateDB Edge regions. We use Cloudflare Argo Tunnels (via CloudflareD) that run on Edge installations.

Account Access

Uses sysadmins@crate.io as the main administrator. Credentials (including 2FA Token) are in Bitwarden.

Deleted Domain(s)

Uses cratedb-edge-proxy.net and cratedb-edge-proxy-dev.net domains. If either of them are deleted for some reason, they will need to be re-added to Cloudflare.

Both of the domains DNS is managed in AWS Route53, so the procedure to re-add them is straightforward - just follow the prompts in Cloudflare.

Next, move on to restoring Argo Tunnels…

Deleted Argo Tunnels

If a tunnel was deleted (accidentally or not) it is not possible to re-create it and a new one would need to be generated instead.

Support Article: https://github.com/crate/support/issues/286