What are your preferred ways of securely accessing a Worker route from an AWS Lambda? I’ve done the

What are your preferred ways of securely accessing a Worker route from an AWS Lambda? I’ve done the reverse before, undecided on what makes the most sense for the other way around.

Ddave What are your preferred ways of securely accessing a Worker route from an AWS La...

sathoro•9/20/23, 7:33 AM

good old secret key in the headers

Ddave What are your preferred ways of securely accessing a Worker route from an AWS La...

Hello, I’m Allie!•9/20/23, 7:36 AM

mTLS?

Amnon•9/20/23, 8:07 AM

Hey,
I'm using Workers to push some logic to the request and proxying the request to the origin backend
When combining that with the Dynamic URL Rewrite Transform Rule it seems like the Transform Rule is triggered two times - from the client to the worker and when proxying the request
In my Dynamic Transform Rule, I used - concat(“/v1”, http.request.uri.path)concat(“/v1”, http.request.uri.path) and ended up with /v1/v1/<original_req_path>/v1/v1/<original_req_path>

I tried to adjust the Custom Filter Expression with no success (skipping the rule every time the URL starts with /v1/v1 works but doesn't feel robust enough)
Any idea how to overcome this behavior?
Thanks

(also posted to the community - https://community.cloudflare.com/t/proxyrequest-in-workers-triggers-transform-rules-more-than-once/557777)

javeed•9/20/23, 9:02 AM

Hi folks,

I have worker route in my site example (miton.com)::

route value us wildcard / and it is pointed to some worker

Here all the requested from any domain or wildcard domain connected with this site are coming to worker route

I need to by pass some of domain example "javi.milton.com" not to go to worker route

Because i have pointed "javi.militon.com" to R2 bucket

javeed•9/20/23, 9:03 AM

I have create new route for "javi.milton.com" and disabled route withour choosing any workers

javeed•9/20/23, 9:03 AM

but still no luck, it is keep pointing to / --> workers

kian•9/20/23, 9:48 AM

You can use Unbound, which gives you up to 30 seconds of CPU time.

Original message was deleted

DaniFoldi•9/20/23, 9:54 AM

if you only do hashing on the client, you're essentially storing the "raw" password, just transformed, which I don't recommend

DaniFoldi•9/20/23, 9:56 AM

all hashing algorithms transform the password, and the theory behind it is interesting, but it's different

DaniFoldi•9/20/23, 9:57 AM

a malicious actor that knows the clienthash can get access, vs if you hash on the server, you still can't do anything if you know the hash

DaniFoldi•9/20/23, 9:57 AM

(if set up properly, secure algorithm, salt, etc etc)

Original message was deleted

DaniFoldi•9/20/23, 9:57 AM

what if your db is a file on a linux computer, like /etc/passwd

DaniFoldi•9/20/23, 9:58 AM

GGuilherme Rosado I agree with @Dani Foldi. It's also simpler.

DaniFoldi•9/20/23, 10:02 AM

thanks, although this is nothing about simplicity or implementation, it's just how cryptography works, I recommend the Katz and Lindell "Introduction to modern cryptography" book if you'd like to see why hashing on the client does nothing for security

zorrov3•9/20/23, 10:05 AM

Hi, just purchase domain through cloudflare. But now my website have error

sathoro•9/20/23, 10:10 AM

bad take

Original message was deleted

zegevlier•9/20/23, 10:14 AM

The issue is that if you only hash client side the attackers will immediately be able to log in to your client's accounts once they have access to the login credentials, while if you hash server side the attacker still has to brute force the hash first.

GGuilherme Rosado How does one integrates Outbound Workers locally in conjunction with the User Wo...

kian•9/20/23, 11:12 AM

I don’t believe local dev has any support for WfP in general

kian•9/20/23, 11:21 AM

Outbound Workers are exclusive to #workers-for-platforms which is an Enterprise product, used for hosting user-code (i.e you let users run a Worker in response to a webhook).

kian•9/20/23, 11:21 AM

Are you using WfP?

kian•9/20/23, 11:21 AM

Service Bindings sounds a lot more like what you want

kian•9/20/23, 11:21 AM

#workers-for-platforms

kian•9/20/23, 11:24 AM

WfP isn’t a billing model, it has no impact on the CPU time

What are your preferred ways of securely accessing a Worker route from an AWS Lambda? I’ve done the

Similar Threads

Similar Threads

Similar Threads