Getting "CNAME Cross-User Banned" using Cloudflare for Saas and r2 with custom domain. We have: 1. r

Getting "CNAME Cross-User Banned" using Cloudflare for Saas and r2 with custom domain.
We have:

r2 bucket with 2 custom domains https://developers.cloudflare.com/r2/buckets/public-buckets/#custom-domains-configuration
```
assets.webstudio.is
```
assets.webstudio.is
```
assets.webstudio.is
```
assets.webstudio.is
and
```
assets.wstd.work
```
assets.wstd.work
```
assets.wstd.work
```
assets.wstd.work
Worker as SaaS fallback origin https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/domain-support/worker-as-origin/ with dispatch namespace inside placed on route
```
*/*
```
*/*
```
*/*
```
*/*
at
```
wstd.work
```
wstd.work
```
wstd.work
```
wstd.work
zone
Worker route service for
```
assets.wstd.work/*
```
assets.wstd.work/*
```
assets.wstd.work/*
```
assets.wstd.work/*
is set to
```
None
```
None
```
None
```
None
to bypass
```
2
```
2
```
2
```
2
.
DNS Entries for SaaS with
```
proxy-fallback A  192.0.2.1
```
proxy-fallback A 192.0.2.1
```
proxy-fallback A  192.0.2.1
```
proxy-fallback A 192.0.2.1
```
*.customers CNAME proxy-fallback.wstd.work
```
*.customers CNAME proxy-fallback.wstd.work
```
*.customers CNAME proxy-fallback.wstd.work
```
*.customers CNAME proxy-fallback.wstd.work

Now if inside worker for SaaS fallback origin we have the following fetch

await fetch(`https://assets.wstd.work/some-resource.ext`, request);

await fetch(`https://assets.wstd.work/some-resource.ext`, request);

await fetch(`https://assets.wstd.work/some-resource.ext`, request);

await fetch(`https://assets.wstd.work/some-resource.ext`, request);

The fetch above fails with "CNAME Cross-User Banned" Error 1014

BUT if we change fetch onto

await fetch(`https://assets.webstudio.is/some-resource.ext`, request);

await fetch(`https://assets.webstudio.is/some-resource.ext`, request);

await fetch(`https://assets.webstudio.is/some-resource.ext`, request);

await fetch(`https://assets.webstudio.is/some-resource.ext`, request);

Everything is OK.

I think that its a bug, as both domains are on same account, we are using cloudflare for SaaS, and access to

assets.wstd.work

assets.wstd.work

assets.wstd.work

assets.wstd.work must not be prevented

Important detail, the fail is reproduced ONLY if customer domain is placed on cloudflare.
And has

PROXY

PROXY

PROXY

PROXY enabled on route.

So our customer with

poke-method.work

poke-method.work

poke-method.work

poke-method.work domain
Has DNS entry on Cloudflare

poke-method.work CNAME customer-id.customers.wstd.work

poke-method.work CNAME customer-id.customers.wstd.work

poke-method.work CNAME customer-id.customers.wstd.work

poke-method.work CNAME customer-id.customers.wstd.work with Proxy flag enabled

No issues with disabled Proxy flag, no issues with providers like Namecheap, only if customer provider is Cloudflare itself

IIvan Starkov Getting "CNAME Cross-User Banned" using Cloudflare for Saas and r2 with custom d...

Unsmart•6/4/23, 6:54 AM

I would recommend you put in a support ticket for that not really anything we can do in here about that

Erisa•6/4/23, 3:40 PM

There are some limitations around same-zone subrequests, this feels liike it might be one of them

Ttoinbis I'll try this channel, it seems closest to my question. I wonder who from Cloudf...

DaniFoldi•6/7/23, 7:19 AM

Apps aren't really maintained any more, see general-discussions so I'm not sure anyone would be "the right person"

Ttoinbis The way I read this notification is that new version is being cooked (from earli...

Erisa•6/7/23, 10:12 AM

Thats correct, and I highly encourage you to fill in the form about your needs/experience so it goes to the right people.
Failing that if you still need to get in touch, maybe @Vero

can connect with the right people

CCetin /⧸/ Elefunc <λ>We have been getting this error without any code changes on our end for the last...

Erisa•6/7/23, 7:31 PM

closing the loop here - https://www.cloudflarestatus.com/incidents/1mj9jch1tqf9

Workers KV returning 500 HTTP responses, affecting several components

rob•6/9/23, 6:09 PM

is there pricing for WfP ?

rob•6/9/23, 6:09 PM

Like a pricing table for it anywhere or is it same as workers pricing

Rrob Like a pricing table for it anywhere or is it same as workers pricing

Epailes•6/12/23, 3:41 PM

It's ent only so the pricing will vary based on your contract

Unsmart•6/12/23, 3:43 PM

Eventually there will be yes, they have plans to release to non-enterprise. Not sure how far out that is currently but hopefully soon

rob•6/14/23, 12:07 AM

yeah we're in there now so i guess its charghed at the reg workers rate for now

kian•6/19/23, 7:54 PM

https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/src/create-worker-upload-form.ts#L44-L50

kian•6/19/23, 8:02 PM

Yep

kian•6/19/23, 8:03 PM

script_namescript_name is how you tell it that the class is exported from another Worker

rob•6/19/23, 9:49 PM

could i make a namespace just for my SaaS workers for our backend? then use a dispatch worker for juyst all of our client facing api endpoints althru the routing of that dyabmic dispatch worker for thta namespace? I know nameSpaces are supposed to be for "user workers" but this use case would work for us.. for our own workers that power our platform,

James•6/21/23, 4:13 PM

I do not believe so

James•6/21/23, 4:14 PM

@eidam would know for sure, when he's around next

rob•6/23/23, 10:55 PM

can you use a service bindings from one namespace on a worker that on anoher namespace?

rob•6/23/23, 10:55 PM

or do they both have to be on the same one

rob•6/24/23, 8:55 PM

yeah, i'm gonna put them in the same namespace just to be safe.

Ttoinbis Hey there! Am wondering if such scenario would be possible (now or in the future...

Hello, I’m Allie!•6/26/23, 10:05 PM

Cloudflare for SaaS + Workers for Platforms?

Aiden•7/17/23, 1:51 AM

How is workers for platforms priced? I couldn’t find any docs about that, and is it available as a custom, stand-alone product without enterprise in any way?

Getting "CNAME Cross-User Banned" using Cloudflare for Saas and r2 with custom domain. We have: 1. r

Similar Threads

Similar Threads

Similar Threads