Hi guys, I am using cloudflare as a reverse proxy. I had users tell me last night that they where ge

Hi guys, I am using cloudflare as a reverse proxy. I had users tell me last night that they where getting urls with __ch_chl_rt_tk parameters in them with blank pages. Do I need to do something to handle this correctly inside my cloudflare workers?

AAdvany Hi guys, I am using cloudflare as a reverse proxy. I had users tell me last nigh...

AdvanyOP•8/24/23, 10:06 AM

also submitted a ticket: Ticket ID: 2907586

arggh•8/24/23, 10:58 AM

Are Cloudflare Stream uploads (via TUS) supposed to be cancellable? Using the Uppy uploader (also used in Cloudflare docs) just fails, saying that

Method DELETE is not allowed by Access-Control-Allow-Methods in preflight response.

Method DELETE is not allowed by Access-Control-Allow-Methods in preflight response.

Uploading, pausing and resuming work.

Original message was deleted

AdvanyOP•8/24/23, 11:56 AM

seems like its hitting the worker...

bkyerv•8/24/23, 12:35 PM

Hello everyone. Rookie question: can someone advise where I can get the ip address to set up dns settings?

bkyerv•8/24/23, 12:36 PM

I don't even know if this is something that cloudflare provides or is it something I have to get from somewhere else and insert into this field

Bbkyerv Hello everyone. Rookie question: can someone advise where I can get the ip addre...

Hello, I’m Allie!•8/24/23, 12:41 PM

What service are you trying to set up?

Hello, I’m Allie!•8/24/23, 12:41 PM

You need the IP address for the service

bkyerv•8/24/23, 12:42 PM

I have a pages app I deployed using cloudflare. Does that mean I have to find out IP address of the pages app?

Bbkyerv I have a pages app I deployed using cloudflare. Does that mean I have to find ou...

Hello, I’m Allie!•8/24/23, 12:43 PM

Follow this tutorial to use your domain as a Custom Domain for your Pages project.

Custom domains · Cloudflare Pages docs

When deploying your Pages project, you may wish to point custom domains (or subdomains) to your site.

bkyerv•8/24/23, 12:46 PM

thank you. Are there any distinct advantages or differences in using CNAME records compared to A records when configuring DNS settings? I'm aware that both CNAME and A records can be employed for DNS setup, but I'm uncertain if one offers specific benefits over the other

Bbkyerv thank you. Are there any distinct advantages or differences in using CNAME recor...

Hello, I’m Allie!•8/24/23, 12:49 PM

It's a difference in what they can be used for. As an example, Pages uses CNAMEs for its custom domains. This means that even if Pages changes the IP addresses it uses to serve content, that change will be reflected on your CNAMEd domain as well. With an A/AAAA record, it will only function if the IP address continues to serve that content. But, in return, a single IP address can serve content for many sites at once.

bkyerv•8/24/23, 12:57 PM

I see thank you

F0rce•8/24/23, 6:50 PM

Is it possible to allow access to enrolled users in gateway (Cloudflare Zero Trust Access) without having to use the E-Mail OTP-Code (we don't have / need an IDP atm). I would just like if the user has gateway installed and enabled that he gains instant access.

FF0rce Is it possible to allow access to enrolled users in gateway (Cloudflare Zero Tru...

Chaika•8/24/23, 7:01 PM

You can use a gateway posture check, and then a service auth policy which includes it: https://community.cloudflare.com/t/using-warp-posture-checks-with-cloudflare-access/449569

Cloudflare Community

Using WARP posture checks with Cloudflare Access

This tutorial explains how to enable WARP client posture checks and use them in an Access application policy. Enabling the “Warp” and “Gateway” selectors The “Warp” and “Gateway” selectors are not visible in the policy creator by default and must be manually enabled. Fortunately, this is quite simple and can be done in only a few steps. In th...

Chaika•8/24/23, 7:02 PM

Clients will pass the “Gateway” posture check if:

    The WARP client is signed in to your Zero Trust organization; and
    The WARP connection mode is “Gateway with WARP”; and
    The “Proxy” option is enabled in Settings → Network → Firewall

Clients will pass the “Gateway” posture check if:

    The WARP client is signed in to your Zero Trust organization; and
    The WARP connection mode is “Gateway with WARP”; and
    The “Proxy” option is enabled in Settings → Network → Firewall

Important to note those requirements as well

CChaika You can use a gateway posture check, and then a service auth policy which includ...

F0rce•8/24/23, 7:26 PM

Thanks for your help. I had everything setup correctly besides the Service Auth Policy. I was using allow.

I sometimes get discombombulated when to use which policy... I would have never thought that Gateway is an Service Auth Policy.

Really appreciate it

FF0rce Thanks for your help. I had everything setup correctly besides the Service Auth ...

Chaika•8/24/23, 7:29 PM

Of course!

Yea it can be a bit confusing, Allow is basically "go through an identity provider, and then check the conditions", Bypass is if you match these conditions, exit out of the Zero Trust flow and go through normal zone security, Service Auth is "check these conditions, if you pass, you go through the full zero trust flow, just without an identity"

Chaika•8/24/23, 7:30 PM

https://developers.cloudflare.com/cloudflare-one/policies/access/#actions

CChaika Of course! Yea it can be a bit confusing, Allow is basically "go through an ide...

F0rce•8/24/23, 7:30 PM

Thanks for the extra clarification. I will write that down in our notes. Have a great rest of day

Cyb3r-Jak3•8/24/23, 8:41 PM

1. You can delete the DNS record for the tunnel. You'll just have to make sure to recreate it
2. You can enable/disable login methods for certain applications

Chaika•8/24/23, 8:45 PM

would be cool, wouldn't hold your breath for it though. That entire UI is just a wrapper around the cloudflared config in json format, and afaik there's no way to disable a ingress rule without deleting it, so it'd need to be added there first (some disabled: property or something)

F0rce•8/24/23, 9:26 PM

I am currently getting the following warning when starting my worker with

wrangler dev --remote

wrangler dev --remote

▲ [WARNING] worker failed to prewarm: Service Temporarily Unavailable▲ [WARNING] worker failed to prewarm: Service Temporarily Unavailable

Is there something I can do on my side, or do I have to wait until it is fixed on cloudflare side ?

kian•8/24/23, 9:49 PM

Are you using Queues?

F0rce•8/24/23, 10:16 PM

a small google search said that queues can not be used in

--remote

--remote

so I fixed it by not using queues (as they were not needed for my testing). thanks you for the answer though.

valkyrie_pilot•8/24/23, 10:57 PM

what's the difference between "Update DNS record" and "Patch DNS record" in the API?

Vvalkyrie_pilot what's the difference between "Update DNS record" and "Patch DNS record" in the ...

Cyb3r-Jak3•8/25/23, 12:03 AM

Update replaces and patch replaces parts

valkyrie_pilot•8/25/23, 12:15 AM

alright, will probably only use update then as i already have all the record data

Logos•8/25/23, 1:58 AM

Does anybody know what contract negotiation means in this agile value, Customer Collaboration Over Contract Negotiation?

valkyrie_pilot•8/25/23, 3:58 AM

is there a reason the API returns values for DNS names that it doesn't actually support? For example, rather then returning @@ for root zone DNS records, it returns the name of the zone, which is.. complex to normalize