Check Security => Events (Magic Link: https://dash.cloudflare.com/?to=/:account/:zone/security/event

Check Security => Events (Magic Link: https://dash.cloudflare.com/?to=/:account/:zone/security/events), do you see any blocks? iirc Observatory uses Google Cloud IPs still that aren't known bots

ChaikaOP•8/23/23, 7:53 PM

for what it's worth as well, observatory is just Lighthouse with some extra recommendations/etc on top

CChaika Check Security => Events (Magic Link: https://dash.cloudflare.com/?to=/:account/...

Frerduro•8/23/23, 7:54 PM

yes bot fight and browser integrity checks

Frerduro•8/23/23, 7:54 PM

ChaikaOP•8/23/23, 7:54 PM

ahh yea it looks like its bot fight mode

ChaikaOP•8/23/23, 7:55 PM

you can try turning it off for a bit, running the test, and re-enabling it after

Frerduro•8/23/23, 7:55 PM

this doesn't happen on other websites though

Frerduro•8/23/23, 7:55 PM

its only this domain

Frerduro•8/23/23, 7:55 PM

ChaikaOP•8/23/23, 7:56 PM

yea, for whatever reason observatory isn't a known bot so it gets blocked by it sometimes

ChaikaOP•8/23/23, 7:58 PM

it's a known issue that has been mentioned a few times before on the forums.
The thing that sucks is Bot Fight Mode isn't configurable at all, only Pro's Super Bot Fight Mode is, so your only option is just to turn it off.
Again, For what it's worth, even Cloudflare's docs recommend disabling it when not under attack:
https://developers.cloudflare.com/bots/troubleshooting/#what-should-i-do-if-i-am-getting-false-positives-caused-by-bot-fight-mode-bfm-or-super-bot-fight-mode-sbfm

BFM and SBFM are high security features intended to quickly help customers under active attack stop as many bots as possible. Due to the high security threshold, false positives do sometimes happen.
If you turned on BFM during an attack, and the attack has subsided, we recommend either disabling the feature using IP Access Rules to bypass BFM, or looking at Bot Management for Enterprise,

Original message was deleted

ChaikaOP•8/23/23, 8:10 PM

Good question, I was under the impression they were aware of it because of this comment by sdayman:
https://community.cloudflare.com/t/bug-cloudflares-speed-test-blocked-by-bot-fight-mode/474316/2?u=chaika

Yep…the new Speed Test is a unique setup, and they’re working on finding a way to add it as a Known Bot.

ChaikaOP•8/23/23, 8:10 PM

was a while ago though

valkyrie_pilot•8/24/23, 3:04 AM

is the cloudflare-rs library still maintained? There do appear to be a fair number of pulls and issues going unanswered, and it has been 6 months, so I was wondering.

Aalexmilde hey. im using sourcing-kit with an aws s3 import does anybody know whether its p...

alexmilde•8/24/23, 7:09 AM

can anybody tell me whether there is a solution for this?

Vvalkyrie_pilot is the cloudflare-rs library still maintained? There do appear to be a fair numb...

kian•8/24/23, 9:53 AM

Any SDK but cloudflare-go probably won’t get any attention until they’re all auto-gen’d

Advany•8/24/23, 10:00 AM

Hi guys, I am using cloudflare as a reverse proxy. I had users tell me last night that they where getting urls with __ch_chl_rt_tk parameters in them with blank pages. Do I need to do something to handle this correctly inside my cloudflare workers?

AAdvany Hi guys, I am using cloudflare as a reverse proxy. I had users tell me last nigh...

Advany•8/24/23, 10:06 AM

also submitted a ticket: Ticket ID: 2907586

arggh•8/24/23, 10:58 AM

Are Cloudflare Stream uploads (via TUS) supposed to be cancellable? Using the Uppy uploader (also used in Cloudflare docs) just fails, saying that

Method DELETE is not allowed by Access-Control-Allow-Methods in preflight response.

Method DELETE is not allowed by Access-Control-Allow-Methods in preflight response.

Uploading, pausing and resuming work.

Original message was deleted

Advany•8/24/23, 11:56 AM

seems like its hitting the worker...

bkyerv•8/24/23, 12:35 PM

Hello everyone. Rookie question: can someone advise where I can get the ip address to set up dns settings?

bkyerv•8/24/23, 12:36 PM

I don't even know if this is something that cloudflare provides or is it something I have to get from somewhere else and insert into this field

Bbkyerv Hello everyone. Rookie question: can someone advise where I can get the ip addre...

Hello, I’m Allie!•8/24/23, 12:41 PM

What service are you trying to set up?

Hello, I’m Allie!•8/24/23, 12:41 PM

You need the IP address for the service

bkyerv•8/24/23, 12:42 PM

I have a pages app I deployed using cloudflare. Does that mean I have to find out IP address of the pages app?

Bbkyerv I have a pages app I deployed using cloudflare. Does that mean I have to find ou...

Hello, I’m Allie!•8/24/23, 12:43 PM

Follow this tutorial to use your domain as a Custom Domain for your Pages project.

Custom domains · Cloudflare Pages docs

When deploying your Pages project, you may wish to point custom domains (or subdomains) to your site.

bkyerv•8/24/23, 12:46 PM

thank you. Are there any distinct advantages or differences in using CNAME records compared to A records when configuring DNS settings? I'm aware that both CNAME and A records can be employed for DNS setup, but I'm uncertain if one offers specific benefits over the other

Bbkyerv thank you. Are there any distinct advantages or differences in using CNAME recor...

Hello, I’m Allie!•8/24/23, 12:49 PM

It's a difference in what they can be used for. As an example, Pages uses CNAMEs for its custom domains. This means that even if Pages changes the IP addresses it uses to serve content, that change will be reflected on your CNAMEd domain as well. With an A/AAAA record, it will only function if the IP address continues to serve that content. But, in return, a single IP address can serve content for many sites at once.

bkyerv•8/24/23, 12:57 PM

I see thank you

F0rce•8/24/23, 6:50 PM

Is it possible to allow access to enrolled users in gateway (Cloudflare Zero Trust Access) without having to use the E-Mail OTP-Code (we don't have / need an IDP atm). I would just like if the user has gateway installed and enabled that he gains instant access.

FF0rce Is it possible to allow access to enrolled users in gateway (Cloudflare Zero Tru...

ChaikaOP•8/24/23, 7:01 PM

You can use a gateway posture check, and then a service auth policy which includes it: https://community.cloudflare.com/t/using-warp-posture-checks-with-cloudflare-access/449569

Cloudflare Community

Using WARP posture checks with Cloudflare Access

This tutorial explains how to enable WARP client posture checks and use them in an Access application policy. Enabling the “Warp” and “Gateway” selectors The “Warp” and “Gateway” selectors are not visible in the policy creator by default and must be manually enabled. Fortunately, this is quite simple and can be done in only a few steps. In th...

ChaikaOP•8/24/23, 7:02 PM

Clients will pass the “Gateway” posture check if:

    The WARP client is signed in to your Zero Trust organization; and
    The WARP connection mode is “Gateway with WARP”; and
    The “Proxy” option is enabled in Settings → Network → Firewall

Clients will pass the “Gateway” posture check if:

    The WARP client is signed in to your Zero Trust organization; and
    The WARP connection mode is “Gateway with WARP”; and
    The “Proxy” option is enabled in Settings → Network → Firewall

Important to note those requirements as well

CChaika You can use a gateway posture check, and then a service auth policy which includ...

F0rce•8/24/23, 7:26 PM

Thanks for your help. I had everything setup correctly besides the Service Auth Policy. I was using allow.

I sometimes get discombombulated when to use which policy... I would have never thought that Gateway is an Service Auth Policy.

Really appreciate it

FF0rce Thanks for your help. I had everything setup correctly besides the Service Auth ...

ChaikaOP•8/24/23, 7:29 PM

Of course!

Yea it can be a bit confusing, Allow is basically "go through an identity provider, and then check the conditions", Bypass is if you match these conditions, exit out of the Zero Trust flow and go through normal zone security, Service Auth is "check these conditions, if you pass, you go through the full zero trust flow, just without an identity"

ChaikaOP•8/24/23, 7:30 PM

https://developers.cloudflare.com/cloudflare-one/policies/access/#actions

CChaika Of course! Yea it can be a bit confusing, Allow is basically "go through an ide...

F0rce•8/24/23, 7:30 PM

Thanks for the extra clarification. I will write that down in our notes. Have a great rest of day

Cyb3r-Jak3•8/24/23, 8:41 PM

1. You can delete the DNS record for the tunnel. You'll just have to make sure to recreate it
2. You can enable/disable login methods for certain applications

ChaikaOP•8/24/23, 8:45 PM

would be cool, wouldn't hold your breath for it though. That entire UI is just a wrapper around the cloudflared config in json format, and afaik there's no way to disable a ingress rule without deleting it, so it'd need to be added there first (some disabled: property or something)

F0rce•8/24/23, 9:26 PM

I am currently getting the following warning when starting my worker with

wrangler dev --remote

wrangler dev --remote

▲ [WARNING] worker failed to prewarm:  Service Temporarily Unavailable

▲ [WARNING] worker failed to prewarm:  Service Temporarily Unavailable

Is there something I can do on my side, or do I have to wait until it is fixed on cloudflare side ?

kian•8/24/23, 9:49 PM

Are you using Queues?

F0rce•8/24/23, 10:16 PM

a small google search said that queues can not be used in

--remote

--remote

so I fixed it by not using queues (as they were not needed for my testing). thanks you for the answer though.

valkyrie_pilot•8/24/23, 10:57 PM

what's the difference between "Update DNS record" and "Patch DNS record" in the API?

Vvalkyrie_pilot what's the difference between "Update DNS record" and "Patch DNS record" in the ...

Cyb3r-Jak3•8/25/23, 12:03 AM

Update replaces and patch replaces parts

valkyrie_pilot•8/25/23, 12:15 AM

alright, will probably only use update then as i already have all the record data

Logos•8/25/23, 1:58 AM

Does anybody know what contract negotiation means in this agile value, Customer Collaboration Over Contract Negotiation?

Clients will pass the “Gateway” posture check if: The WARP client is signed in to your Zero Trust organization; and The WARP connection mode is “Gateway with WARP”; and The “Proxy” option is enabled in Settings → Network → Firewall

Check Security => Events (Magic Link: https://dash.cloudflare.com/?to=/:account/:zone/security/event

Similar Threads

Similar Threads

Similar Threads