Private Label SSL

Show your private label booking page and control panel login securely over https by giving your own domain an SSL certificate. Beds24's own certificate doesn't match your domain name, so without your own certificate browsers show a warning.

Prerequisites: a private label domain set up in Settings > Booking Engine > Private Label. See Private Label. Options 1 to 3 are for experienced network administrators.

Table of Contents

1. Option 1: Use Cloudflare for your control panel login
2. Option 2: Use Cloudflare for your booking page
3. Option 3: Install your own reverse proxy server
4. Option 4: Fully managed secure proxy from Beds24

Option 1: Use Cloudflare for your control panel login

This works on the Cloudflare free plan. Cloudflare is only recommended for low-traffic sites.

Steps:

1. Create an account for your domain at Cloudflare.
2. Move your nameservers from your current host to Cloudflare.
3. Set up DNS at Cloudflare for all existing services on your domain and subdomains. Cloudflare tries to do this automatically.
4. Add a CNAME record for your private label domain or subdomain pointing to admin.beds24.com, with proxy status Proxied.
5. In the Cloudflare SSL/TLS menu, set SSL to Full.
6. Go to SSL/TLS > Edge Certificates and, at the bottom of the page, enable Universal SSL.
7. Wait up to 24 hours until your domain opens with https://.
8. Once https:// works, go to SSL/TLS > Edge Certificates and set Always Use HTTPS to ON.

Expected result: your private label domain opens the control panel login securely with https://.

Option 2: Use Cloudflare for your booking page

Cloudflare is only recommended for low-traffic sites.

Steps:

1. Complete all steps in Option 1.
2. Go to Page Rules in Cloudflare.
3. Add a new rule. In If the URL matches, enter your private label domain.
4. Add the rule type Forwarding URL with the type Permanent 301.
5. For the forwarding URL, enter your private label domain followed by booking.php?propid=12345, where 12345 is the property you want to open. To open all your properties, use booking.php?ownerid=1234, where 1234 is your Beds24 owner ID.

Expected result: your domain opens the booking page securely, for example https://my.private.domain.com/booking.php?propid=12345.

Option 3: Install your own reverse proxy server

You can run the proxy on your own server. These instructions are for a LAMP server.

Prerequisites: root access to your server, the ability to configure Apache and the ability to install an SSL certificate. A small virtual server is usually enough.

Steps:

1. Set up a LAMP server for your domain.
2. Purchase an SSL certificate for your domain.
3. Set up Apache to serve your domain over https. For the proxy, specify SSLProxyEngine On.
4. Set up Apache as a reverse proxy in your Apache virtual host:

   # Not an open proxy
   ProxyRequests off
   # Proxying is available for anyone
   <Proxy *>
     Order deny,allow
     Allow from all
   </Proxy>
   # The site being proxied
   ProxyPass / https://admin.beds24.com/
   ProxyPassReverse / https://admin.beds24.com/

5. Create an A record for your domain pointing at your proxy server's IP address. If you created a CNAME record for a non-SSL setup before, remove it.
6. Install mod_evasive to block excessive traffic from single IP addresses, so your whole proxy doesn't get blacklisted:

   apt-get install libapache2-mod-evasive

7. Enter these configuration values in evasive.conf:

   DOSHashTableSize 3097
   DOSPageCount 2
   DOSSiteCount 10
   DOSPageInterval 1
   DOSSiteInterval 1
   DOSBlockingPeriod 10

Note: if your proxy server isn't a LAMP server, make sure it sends requests with HTTP_X_FORWARDED_HOST set to your domain name.

Option 4: Fully managed secure proxy from Beds24

For a fee, Beds24 can purchase and install a certificate for you and provide a private IP address and a reverse proxy server on Beds24's servers. Contact Beds24 support for the price.

Troubleshooting

Important notes

• Beds24 support can't help with work on your own server.

Related Articles

• Private Label
• Google Cross Domain Tracking