Cloudflare Developers•3y ago

I got MailChannels lockdown + SPF + DKIM + DMARC setup already.

Original message was deleted

chientrm.comOP•8/20/23, 5:49 PM

oh, they had lockdown but the smtp thing is still gg.

arkhamrogue99•8/20/23, 6:46 PM

help me pwease
general-helpI need help with cloudflare turnstile widget Crashing on my windows 7

BlaBla (Please tag or reply)•8/20/23, 6:50 PM

Hey guys, I have a theoretical DNS question. If I have dynamic name servers scaling up/down. Is there a way to bypass having to constantly update (add/delete) domain registrar's DNS settings? I read about anycast but not sure how multiple VMs can have same IP in cloud.

micromashor•8/20/23, 7:31 PM

Hi, I just got a questionable-looking email (claiming to be from Cloudflare) regarding certificate renewal. Is there someone I can reach out to about this?

This is getting buried quickly, so if CF sees this, please feel free to DM me for specifics.

Mmicromashor Hi, I just got a questionable-looking email (claiming to be from Cloudflare) reg...

zegevlier•8/20/23, 7:34 PM

Do you have Certificate Transparency Monitoring (under https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates) enabled for your domain? If so, it's probably from that.

zegevlier•8/20/23, 7:34 PM

Those emails can look a bit dodgy

micromashor•8/20/23, 7:34 PM

no, it's not informing me of new issuance, it's asking me to add DCV records to my DNS

micromashor•8/20/23, 7:35 PM

mind if I DM you a screenshot?

zegevlier•8/20/23, 7:35 PM

Sure, but keep in mind I'm not an employee of Cloudflare. Just someone from the community

micromashor•8/20/23, 7:35 PM

I know, not much you can do knowing my domain, just don't need that out in the open on discord lol

Original message was deleted

Salamus•8/20/23, 7:36 PM

great idea

Salamus•8/20/23, 7:36 PM

do you have any tips on how i should do it?

Mmicromashor no, it's not informing me of new issuance, it's asking me to add DCV records to ...

Chaika•8/20/23, 7:37 PM

did you perhaps enable ssl for saas custom alerts/universal ssl alerts or adv. cert alerts under Notifications in the Cloudflare dash?

SSalamus great idea

Chaika•8/20/23, 7:37 PM

even if you did use a bunch of nodes to warm it/some other way, it'd just be evicted quickly without any more requests to keep it in cache

Salamus•8/20/23, 7:38 PM

they do get requests

Salamus•8/20/23, 7:38 PM

just that a server can wait 10-15 seconds for a slow response

CChaika did you perhaps enable ssl for saas custom alerts/universal ssl alerts or adv. c...

micromashor•8/20/23, 7:38 PM

no, all I have is HTTP DDoS, Web Analytics, and Workers Weekly

Salamus•8/20/23, 7:38 PM

with low cache i have lower visits since the user needs response within 3-5 seconds

Chaika•8/20/23, 7:39 PM

sounds like you would benefit from tiered caching instead, the free version selects a CF location closest to your origin to use for a 2nd cache layer before contacting the real origin

Salamus•8/20/23, 7:39 PM

i do have that

Salamus•8/20/23, 7:39 PM

but i dont understand something

Salamus•8/20/23, 7:39 PM

just until last week i had 90%+ cache rate

Salamus•8/20/23, 7:39 PM

now under 50

Chaika•8/20/23, 7:40 PM

Do you have Pro? I would check Cache Analytics if so

Salamus•8/20/23, 7:40 PM

no its free for this domain

Chaika•8/20/23, 7:41 PM

hmm, do you have a cache rule/page rule forcing cache for it to make sure nothing else like cookies/etc is interfering?

Salamus•8/20/23, 7:41 PM

yeah cache rule

Salamus•8/20/23, 7:41 PM

*.domain/**.domain/*

Chaika•8/20/23, 7:42 PM

cache rules don't accept wildcards, that's a page rule I assume?
I mean, as long as its showing HIT/Revalidated/Miss (not dynamic) for you in your own tests, it should be cachable

Salamus•8/20/23, 7:42 PM

page rule** sorry

Salamus•8/20/23, 7:42 PM

yeah its missing

Chaika•8/20/23, 7:44 PM

hmm yea without cache analytics most we can do is guess / see what's changed recently.
You could try Cache Reserve as well, but it's paid. Ultimately it is just a cache, and cache will eventually expire, your origin really shouldn't be that slow if you need it to be faster, perhaps you could slap nginx cache or something in front of it, although Tiered Caching should be kind of effectively doing that

Salamus•8/20/23, 7:45 PM

yeah i just dont understand what happened

Salamus•8/20/23, 7:45 PM

it did happen once before

Salamus•8/20/23, 7:45 PM

and it got fixed by itself in a month

Salamus•8/20/23, 7:45 PM

lol

Mmicromashor no, all I have is HTTP DDoS, Web Analytics, and Workers Weekly

Chaika•8/20/23, 7:47 PM

huh, was zegevlier able to help you identify it, or could you send me a screenshot of it as well?

micromashor•8/20/23, 7:48 PM