yea, you get the error code CF 1033 / http status code 530

ChaikaOP•2/15/23, 10:55 PM

Tunnels establish an outbound connection to Cloudflare, you don't need to open any ports and it doesn't matter if your IP is dynamic

ChaikaOP•2/15/23, 10:56 PM

You're saying you have more then one server, and you don't want one of them going down making all your web servers inaccessible?

ChaikaOP•2/15/23, 10:56 PM

or.. can you explain your use case a bit more?

ChaikaOP•2/15/23, 10:57 PM

Where is the tunnel running?

ChaikaOP•2/15/23, 10:58 PM

If you have the tunnel and your web server running on a rented VPS for example, then no the tunnel would still be active

ChaikaOP•2/15/23, 10:58 PM

If you are self-hosting your web server and the tunnel on your computer, then yea the tunnel would be dead, so would your web server

ChaikaOP•2/15/23, 11:01 PM

The tunnel is just a connector to your web server, it can't bring what's dead back to life, it's like a reverse proxy with some special features

ChaikaOP•2/15/23, 11:05 PM

What do you mean "serverless"?

ChaikaOP•2/15/23, 11:05 PM

You're asking if you can use a serverless function, like a cf worker, as a reverse proxy?

ChaikaOP•2/15/23, 11:08 PM

If so, yea you can, but Tunnels are more special then that. A Worker could connect to a normal origin and act as a reverse proxy.
Cloudflare -> Worker -> (Logic) -> Normal Origin, established connection inbound over 80/443
Tunnels connect outbound to Cloudflare. So unlike with a normal origin, you don't need to have a static IP, or port forward, or worry about https. The tunnel creates a secure tunnel/connection back to Cloudflare's edge, as an outbound connection. Then when requests come to Cloudflare's proxy for the tunnels' hostname, CF just forwards the requests down the tunnel, and cloudflared (the actual service running on your infrastructure) connects to your configured web server
Cloudflare -> Tunnel Connection -> cloudflared (running on your server) -> Web Server

ChaikaOP•2/15/23, 11:10 PM

Cyb3r-Jak3•2/15/23, 11:24 PM

Have you tried deleting the cache folder?

ChaikaOP•2/16/23, 2:48 AM

Makes sense. Cloudflare's docs still say Sectigo is only used for backups. You can buy ACM and via it's API, get a sectigo cert

ChaikaOP•2/16/23, 2:50 AM

(Not sure if it's guaranteed to say possible though, as the UI still doesn't let you pick Sectigo, and it's not listed as a normal cert authority on https://developers.cloudflare.com/ssl/reference/certificate-authorities/, but it's been in the API for ~5 months or so now)

Cyb3r-Jak3•2/16/23, 3:03 AM

I thought sectigo was removed as a CA

ChaikaOP•2/16/23, 3:03 AM

I think you're thinking of Digicert

Cyb3r-Jak3•2/16/23, 3:03 AM

Cyb3r-Jak3•2/16/23, 3:04 AM

ChaikaOP•2/16/23, 3:05 AM

Digicert, who Cloudflare has an intermediary for (allowing them to issue "Cloudflare Inc" certs), is going away https://developers.cloudflare.com/ssl/reference/migration-guides/digicert-update/, at uhh some point.
Sectigo is new and only available through the API for ACM, currently mainly being used for Backup certs

ChaikaOP•2/16/23, 3:07 AM

The only reference I can find to Sectigo on any docs page or blog is just in the backups ssl page section in the footnote: "Cloudflare may also issue backup certificates from Google Trust Services or Sectigo."

ChaikaOP•2/16/23, 3:09 AM

I swear they moved the dates back, but the ACM Page for Digicert says

"On March 6, 2023, Cloudflare will stop using DigiCert as an issuing certificate authority (CA) for new advanced certificates. This will not affect existing custom hostname certificates.

On March 13, 2023, Cloudflare will stop using DigiCert as the CA for advanced certificate renewals. This will not affect existing advanced certificates, only their renewals."
So it's got a month

Cyb3r-Jak3•2/16/23, 3:10 AM

Yeah I see Sectigo reference but not explicitly referenced

ChaikaOP•2/16/23, 3:11 AM

Yea, I assume they're more expensive to CF or something, and hence why they only offer them as Backup certs (if using GTS for Universal, it seems to fall back to Sectigo for Backup), or through ACM API

HHello, I’m Allie!I believe the cap is per-request

Dubz•2/16/23, 8:01 AM

Oh. Yeah I knew of that. Makes a lot more sense now lol. Although I'm sure I'll forget when doing something on a tunnel lol

PencilNavigator•2/16/23, 8:10 AM

https://www.cloudflare.com/zh-cn/5xx-error-landing/?utm_source=errorcode_521&utm_campaign=
LOL Spelling mistake

PencilNavigator•2/16/23, 8:10 AM

it's 但是 not 单是

yea, you get the error code CF 1033 / http status code 530

Similar Threads

Similar Threads

Similar Threads