jimmy06; I am not meaning to criticise. Simply stating that cloudflare is free, yes, you could self sign a certificate and ship leverage it, however you could also run into issues in which the client barks about it not being known by the root CA, however cloudflare would allow you to be more flexible and put SSL on client browser => buddystats.com if you didn't wish to put SSL at the moment between HB Plugin => buddystats.com; either way just adding to the overall discussion.
One thing I am curious about is that on W10_enterprise_n; I've had zero issues with buddystats working. It works great on my phones (iOS and Android) and viewing via the browser's mobile first version. However, I am currently traveling and using my macbook pro, which requires me to run d3 + db within a vm.
I am using NAT (versus bridge), so it should be able to communicate without issue. I've read the other comments in this thread related to the "unblock" on the dll; which does not seem to apply to this issue. The challenge I've noticed is that buddystats does not show the bot online, when it in fact is. I can perform a TCPDUMP as well (once windows is done with it's silly updates) to see if it is actually traversing my internal nat path.
I have no iptables rules blocking the traffic, nor other local firewall client preventing any outgoing connections, they're permitted in terms of NEW, EST, RELATED; just not invalid which should not interfere (as this has always been the case even on my w10_n machine).
Are you aware of any other issue related to leveraging buddystats within a vmware (vmware fusion + windows 7) environment that would prevent the data from reaching buddystats, thus showing it offline?