Cloudflare Developers•3y ago

i've had attacks before that do 1m RPS

VoltzOP•10/20/23, 4:52 PM

usually they're nothing but i have definitely encountered very large attacks

VVoltz i've had attacks before that do 1m RPS

itsmatteomanf•10/20/23, 4:53 PM

Depending on traffic and such you might consider also their enterprise plan (it’s expensive, but with such volume might make sense…)

VoltzOP•10/20/23, 4:54 PM

its a new project im working on so im not too worried about traffic atm I just wanted to make sure for the future, I will give it a shot and see how CF pages work for me

VoltzOP•10/20/23, 4:54 PM

The speed for the pricing with what i have been testing has been excellent

VoltzOP•10/20/23, 4:56 PM

For the websocket workers I assume all these leverage CF's network aswell and routes them to lowest ping node? Part of this app will have websockets in order to stream data from a client to other clients, and I'm trying to make sure it provides best speeds available to the user. So the information is updated with minimal delay

VoltzOP•10/20/23, 4:56 PM

Since the person providing the data to the other users could be across the world

VVoltz For the websocket workers I assume all these leverage CF's network aswell and ro...

itsmatteomanf•10/20/23, 4:59 PM

It’s all anycast, so each user goes to the closest node. For websocket in user-to-user you need to go to durable objects to handle the sending and the connection. There is no automatic routing, when you connect with websockets you go to the function, which ends it’s run after some time.

itsmatteomanf•10/20/23, 4:59 PM

But I never use websockets, so someone else might be more of help

VoltzOP•10/20/23, 5:00 PM

so it doesnt connect users to users its more so

VoltzOP•10/20/23, 5:00 PM

Provider -> server -> clients

VoltzOP•10/20/23, 5:00 PM

the server just handles broadcasting the data from the provider to the clients connected

OOr Hi, are there known issues with deployment at the moment?

Giacomo•10/20/23, 5:02 PM

Seems so, in particular with Nuxt and Nitro

VVoltz so it doesnt connect users to users its more so

itsmatteomanf•10/20/23, 5:02 PM

Websockets never do, there needs to be a coordination server. In Cloudflare’s case it’s DOs or a separate backend server.

VoltzOP•10/20/23, 5:02 PM

ahhh ok

OOr Hi, are there known issues with deployment at the moment?

itsmatteomanf•10/20/23, 5:02 PM

What are you seeing?

OOr Hi, are there known issues with deployment at the moment?

Chaika•10/20/23, 5:03 PM

There was about 15 minutes ago: https://www.cloudflarestatus.com/incidents/nlbjyqmdjmkp
If you got an error on deployment 15-45 minutes ago with uploading functions, probably that

Cloudflare Workers and Pages Functions uploads issues

VVoltz ahhh ok

itsmatteomanf•10/20/23, 5:03 PM

Ok, technically you could go user-to-user, but you need to connect directly and it requires a ton of work and it won’t be liked much by the browsers.

VoltzOP•10/20/23, 5:04 PM

well im not gonna connect user to user

VoltzOP•10/20/23, 5:04 PM

its just the websocker worker is the middleman

VoltzOP•10/20/23, 5:04 PM

in streaming the data to everyone

VoltzOP•10/20/23, 5:04 PM

I was just wondering if that server would be anycasted

OOr on all deployments, including retrys of previously successful ones

Chaika•10/20/23, 5:04 PM

That was from ~6 minutes ago? If you retry now, any luck?

OOr 17:59:22.338 ✨ Success! Uploaded 2 files (81 already uploaded) (2.16 sec) 17:...

itsmatteomanf•10/20/23, 5:04 PM

That’s the error that was showed in the incident above X

VVoltz I was just wondering if that server would be anycasted

itsmatteomanf•10/20/23, 5:05 PM

The function is, a DO isn’t. It’s generated close to the request that initiates it and then it’s there forever until it’s destroyed.

Iitsmatteomanf The function is, a DO isn’t. It’s generated close to the request that initiates ...

VoltzOP•10/20/23, 5:08 PM

ahhh okay so I see I can use the DO to persist d ata b etween workers but spin up multiple web socket workers

VVoltz ahhh okay so I see I can use the DO to persist d ata b etween workers but spin u...

itsmatteomanf•10/20/23, 5:10 PM

The DO handles websockets, too. You need to connect to the do via the function and that’s it.

VoltzOP•10/20/23, 5:11 PM

oh okay, ill look more when I get home from work, appreciate the help

Rich•10/20/23, 5:34 PM

Has anybody run into issues upgrading a Cloudflare Pages Remix app to Remix v2?

At least during development,

request.cf

request.cf

is undefined so for example our app fails here:

const requestCountry = request.cf.country?.toUpperCase();

const requestCountry = request.cf.country?.toUpperCase();

VoltzOP•10/20/23, 5:44 PM

https://i.imgur.com/8VXJvuD.png

Imgur

VoltzOP•10/20/23, 5:44 PM

I lied

VoltzOP•10/20/23, 5:44 PM

maybe we wont use CF Pages / workers lol

RRich Has anybody run into issues upgrading a Cloudflare Pages Remix app to Remix v2? ...

Rich•10/20/23, 6:09 PM

I ended up shoving it on

context

context

in my server.ts (worker) as seems Remix v2 strips non-standard properties

alex (he/him)•10/20/23, 6:13 PM

Is there a way to get cdn-cgi/imagecdn-cgi/image working on

pages.dev

pages.dev

preview URLs?

VVoltz https://i.imgur.com/8VXJvuD.png

VoltzOP•10/20/23, 6:15 PM

might still give it a go, but i was under the impression from the docs traffic spikes dont count yet 1m malicious requests being counted towards daily quota in a short period of time really doesnt sit well with me fully in production

kian•10/20/23, 6:16 PM

Workers will throttle themselves to 1000 requests per minute in the free plan, but there's nothing that stops a DDoS or similar from using up your quota.

kian•10/20/23, 6:17 PM

Rate limiting is unmetered and free, so that's the recommended route to preventing your quota from being used up by a few malicious IPs.

VoltzOP•10/20/23, 6:18 PM

yea the plan was to use rate limiting

VoltzOP•10/20/23, 6:18 PM

CF's rate limit on my self hosted site works well at mitigating most attacks

VoltzOP•10/20/23, 6:18 PM

also just blocking old HTTP versions but

VoltzOP•10/20/23, 6:18 PM

im still worried about that one person that knows what they're doing

VVoltz yea the plan was to use rate limiting

Chaika•10/20/23, 6:19 PM

Just make sure:
Enable CF Access on your previews (under Pages Project Settings)
Add a Bulk Redirect on your root pages.dev
So that no traffic can go around your Custom Domain

VoltzOP•10/20/23, 6:19 PM

I think ill give it a shot and have my friend setup rules for me since thats his job I think I should be fine

Chaika•10/20/23, 6:21 PM

My understanding is that support should refund you if you get attacked majorly, a few people in here have talked about the process before when they got half a billion requests I believe was the number, it was slow but they eventually got it.
Also worth keeping in mind that Workers are really cheap, bundled requests are $0.50/million flat, so that spike you just got was only 50 cents

CChaika My understanding is that support should refund you if you get attacked majorly, ...

VoltzOP•10/20/23, 6:22 PM

the million requests were within 10s

VoltzOP•10/20/23, 6:22 PM

so that'd add up tremendously

Chaika•10/20/23, 6:22 PM

if you had zero protections sure, but if it's that many requests for a sustained amount of time, the various DDoS detection tools would pick it up, plus just basic rate limiting would help

i've had attacks before that do 1m RPS

Similar Threads

Similar Threads

Similar Threads