Cloudflare Developers•3y ago

Is it possible to use SMS verification instead of email verification with zero trust?

EEuro Ali Is it possible to use SMS verification instead of email verification with zero t...

Cyb3r-Jak3•9/22/23, 7:07 PM

No. Plus SMS doesn’t give you any decent identity information

UUnsmart I always use #durable-objects for everything it basically KV but with durable st...

captain•9/22/23, 7:11 PM

do you think that DO would price out cheaper or how much more expensive than kv or d1. One of the other things i like about the D1 is access to seeing the data in cloudflare dashboard and the rolling backups. Do you know if the backups count against storage quota? Thanks for your expertise!

Ccaptain do you think that DO would price out cheaper or how much more expensive than kv ...

Unsmart•9/22/23, 7:26 PM

DOs are cheaper than KV normally assuming you dont need the large values of KV. D1 might be cheaper depends on the queries you setup but not sure I dont use SQL dbs to know how it might work out pricing wise

UUnsmart DOs are cheaper than KV normally assuming you dont need the large values of KV. ...

captain•9/22/23, 7:28 PM

curious, because i have nobody to talk to about this in my house as soloprenuer, whats your use case with DOs?

Ccaptain curious, because i have nobody to talk to about this in my house as soloprenuer,...

Unsmart•9/22/23, 7:28 PM

anything and everything storage related

(database at least not object storage of course)

UUnsmart anything and everything storage related 🤷 (database at least not object storage...

captain•9/22/23, 7:34 PM

if you don't mind sharing, what's an example of why you went with the DO vs KV or D1 (besides GA)

Unsmart•9/22/23, 7:34 PM

KV is eventually consistent and doesnt have a good API. D1 is SQL

UUnsmart KV is eventually consistent and doesnt have a good API. D1 is SQL

captain•9/22/23, 7:36 PM

the KV is what is making me look elsewhere but whats the downside to you of SQL, seems like SQL is a nice perk rather having to invent things, or am i mistaken

Unsmart•9/22/23, 7:36 PM

I dont personally like SQL I dont think its good compared to NoSQL databases

sakuta•9/22/23, 7:38 PM

what serverless database (preferably nosql) would you personally recommend for pages/workers?

Unsmart•9/22/23, 7:38 PM

DOs

sakuta•9/22/23, 7:40 PM

hm any third party/other solution you'd recommend?

sakuta•9/22/23, 7:41 PM

saw that mongodb atlas serverless' pricing isn't really the most "clear" according to some discussion on their forum

sakuta•9/22/23, 7:41 PM

what's left other than google firestore?

sakuta•9/22/23, 7:41 PM

are there any better alternatives to it (price wise)?

Unsmart•9/22/23, 7:42 PM

theres probably a million other options but I dont know why you wouldnt use DOs on workers

sakuta•9/22/23, 7:42 PM

i primarly use pages atm

sakuta•9/22/23, 7:42 PM

specifically nextjs ssr

Unsmart•9/22/23, 7:42 PM

pages is workers still so

sakuta•9/22/23, 7:42 PM

you'd access them via

process.env

process.env

, right?

Unsmart•9/22/23, 7:43 PM

Idk how nextjs works with pages so no clue

sakuta•9/22/23, 7:43 PM

ok xd

Euro AliOP•9/22/23, 7:53 PM

is it possible to bypass zero trust via ip address

Euro AliOP•9/22/23, 7:54 PM

i want to if ip address is not available on whitelist, ask login.

UUnsmart Idk how nextjs works with pages so no clue

captain•9/22/23, 7:54 PM

i've used KV extensively and can see the advantage of the DO vs KV eventual write situation. That said, the sorting i am experciening for listing things out via prefix is a problem, how do you get around that in your DO nosql set up?

Ccaptain i've used KV extensively and can see the advantage of the DO vs KV eventual writ...

Unsmart•9/22/23, 7:55 PM

depends how you want to sort things but you can do secondary indexes pretty easily given transactional storage and you can reverse sort in DOs so that helps

UUnsmart depends how you want to sort things but you can do secondary indexes pretty easi...

captain•9/22/23, 7:57 PM

i've not set anything up like this, do you happen to have a good link your recommend to read up on this?

Unsmart•9/22/23, 7:58 PM

Not any that im aware of off the top of my head

Ccras6 writing here because i don't know if there is a better channel to ask this quest...

Hello, I’m Allie!•9/22/23, 11:23 PM

Can you trust that only authorized people have the app installed?

Hello, I’m Allie!•9/22/23, 11:24 PM

Because, short of some kind of Vendor Attestation system, I don’t think there is much you can do…

SSpyderZ We're a small Plesk web host, and we create CF domain accounts for all our clien...

Karew•9/22/23, 11:49 PM

You should have clients make their own Cloudflare account and then add you as an administrator to their account's team. Does "client" here mean a generic customer, or more like you were hired as an agency?

SSpyderZ One of the things is, we don't want them to drop the shield by disabling the ser...

Karew•9/23/23, 12:10 AM

So for the architecture here, you host Plesk, but clients also assign their entire domain name nameservers to your Cloudflare account?

SSpyderZ Currently, we create the Plesk account, then create the CF domain record in our ...

Karew•9/23/23, 12:18 AM

That doesn't really seem like the correct way to go about this.

You should be using Cloudflare for SaaS https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/
Or you should be setting up hostnames that you protect that your customers point CNAME records to instead of taking control of a client's entire domain. This is an example of that https://devcenter.heroku.com/articles/custom-domains

Right now your setup is more like how web design agencies or IT management shops operate, you're taking control of an entire domain. What if the client wants to use the domain for email or multiple services? They have to ask you to change all of the records for them, but you're only really interested in Plesk.

Isaac McFadyen•9/23/23, 12:59 AM

Is there a reason you need to create a whole new zone for them? Cloudflare for SaaS would still prevent them from unproxying any records which you don't want them unproxying if that's the concern.

JellyMuffin•9/23/23, 7:55 AM

Hi,

I need some guidance on how to configure this DNS on Cloudflare in the scenario listed below.
I have a domain registered at Godaddy and my new hosting account at SiteDotPro. I want Cloudflare to be in between Godaddy and SiteDotPro.

Since they do not provide an IP address, how do I set this config up on Cloudflare? I know how to set these A and CName records if an IP is present.
How do I set this up with the dns setup information provided by SiteDotPro?

Thanks.

JJellyMuffin Hi, I need some guidance on how to configure this DNS on Cloudflare in the scen...

Hello, I’m Allie!•9/23/23, 8:09 AM

Does this work?

Go to My Websites page;
Expand "Edit website" dropdown list;
Copy real IP address of your Site.pro website;
Go to domain control panel of your domain registrar to update "A" records of your domain;
Replace <placeholder> to a real IP address of your Site.pro website:
@ A <IP of website>
www A <IP of website>