UPD I temporarily paused cloudflare on one of the sites. A few days passed and statistics appeared o

UPD
I temporarily paused cloudflare on one of the sites. A few days passed and statistics appeared on seacrh consol. After I did this for a few days I saw that the problem disappeared.

This way it becomes clear that the server is really accessible and has no problems. Cloudflar has problem 522, which is only visible in the search console.

I was able to catch this error in the error log file.
/wp-includes/functions.php on line 2124\n

This line:

/*

This is definitive if true but fails if $path does not exist or contains
a symbolic link.*/if ( realpath( $path ) === $path ) { return true;}if ( strlen( $path ) === 0 '\\' === $path[0] );}

CHAT GPT said that it is possible to allow access to the temporary folder but also mentioned that this may affect overall security.

I still think that cloudflar had some kind of change on December 12, but I still haven’t figured out how to solve it.
I would be grateful for any thoughts on a solution.
Thanks in advance.

HHob UPD I temporarily paused cloudflare on one of the sites. A few days passed and s...

Isaac McFadyen•12/27/23, 2:16 PM

A 522 error isn't related to either the traceroute you ran before or the Wordpress core (which that file is from). A 522 error is related to Cloudflare timing out when accessing your origin (the origin is your server), not the origin returning a bad response or the wrong path redirect. You need to check any firewalls on your server to make sure they are letting through Cloudflare IPs.

Isaac McFadyen•12/27/23, 2:19 PM

If your server doesn't have firewalls then it's possible your hosting provider does and they are blocking Cloudflare. But it's definitely not an issue that can be debugged with traceroutetraceroute or by looking in the Wordpress core files for a path redirect.

Isaac McFadyen•12/27/23, 2:20 PM

In this case ChatGPT is wrong and is most likely suggesting that answer because you've given it code and specifically told it that the code was wrong and needed to be fixed.

IIsaac McFadyen A 522 error isn't related to either the traceroute you ran before or the Wordpre...

HobOP•12/27/23, 2:26 PM

They have already checked the list of cloudflare IP addresses and said that they are not blocked. I will contact the hosting again. But it seems they don’t want to and/or don’t know what the problem is. Thank you!

HHob They have already checked the list of cloudflare IP addresses and said that they...

Isaac McFadyen•12/27/23, 2:34 PM

No problem. Feel free to direct them to Cloudflare's troubleshooting documentation: https://developers.cloudflare.com/support/troubleshooting/cloudflare-errors/troubleshooting-cloudflare-5xx-errors/

IIsaac McFadyen No problem. Feel free to direct them to Cloudflare's troubleshooting documentati...

HobOP•12/27/23, 2:36 PM

Thanks.

Pook•12/27/23, 3:28 PM

how do i use origin rules to override hosthost header, i don't see the option in my dashboard.

Pook•12/27/23, 3:28 PM

only thing it shows is overriding the port

PPook how do i use origin rules to override `host` header, i don't see the option in m...

Chaika•12/27/23, 3:29 PM

Only Enterprise can

CChaika Only Enterprise can

Pook•12/27/23, 3:30 PM

how much is that

CChaika Only Enterprise can

Pook•12/27/23, 3:39 PM

can cloudflare business do it?

PPook can cloudflare business do it?

Chaika•12/27/23, 3:39 PM

no, Enterprise only

Chaika•12/27/23, 3:39 PM

Why do you think you need it? It's reserved primarily due to security concerns iirc, you shouldn't need it with proper setup

ihatemyself0297•12/27/23, 4:40 PM

Hey there, I do frontend optimizations with Shopify liquid and cloudflare free.
My organization (~10 employees) has a limited budget and I want to learn and do more, with the likes of cloudflare enterprise but also frontend optimizations with different frontend tech outside of Shopify liquid.
I’m not sure how I can find a position given my current skillset, is there a channel to hunt for job postings?

fynn•12/27/23, 4:54 PM

when I set up a custom email domain with icloud, do I have to add the DKIM record in cloudflare proxied or DNS only?

Chaika•12/27/23, 4:57 PM

dkim cnames should be dns-only or otherwise they won't work

Iihatemyself0297 Hey there, I do frontend optimizations with Shopify liquid and cloudflare free. ...

Cyb3r-Jak3•12/27/23, 4:59 PM

Per the rules ( #

welcome-and-rules ), job posting/searching is not allowed in this server.

ashutosh•12/27/23, 5:20 PM

Hi, just wanted to confirm if there is any ongoing issue with WAF custom rules? It appears to be blocking valid requests intermittently

Aashutosh Hi, just wanted to confirm if there is any ongoing issue with WAF custom rules? ...

Chaika•12/27/23, 5:21 PM

Did you check Security -> Events to see the reason for the blocks?

Chaika•12/27/23, 5:22 PM

Magic Link: https://dash.cloudflare.com/?to=/:account/:zone/security/events

ashutosh•12/27/23, 5:25 PM

It just says that it's blocked by the same custom rule which is allowing requests otherwise.

Chaika•12/27/23, 5:26 PM

What's the Custom Rule Expression & the details of the request that got blocked (blurring anything sensitive)?

CChaika What's the Custom Rule Expression & the details of the request that got blocked ...

ashutosh•12/27/23, 5:35 PM

if (starts_with(http.request.uri.path, "/<initial_part_of_path>/") and not is_timed_hmac_valid_v0(<secret_key>, http.request.uri, <ttl>, http.request.timestamp.sec, <separator_length>)) then block else allow

CChaika What's the Custom Rule Expression & the details of the request that got blocked ...

ashutosh•12/27/23, 5:41 PM

Request: <public_domain_of_the_bucket>/<initial_part_of_path>/<rest_of_path_to_the_asset><separator><timestamp>-<generated_token>

Chaika•12/27/23, 5:46 PM

So sounds like it just wasn't valid. Was it already expired based on the ttl and timestamp, or something else perhaps?

CChaika So sounds like it just wasn't valid. Was it already expired based on the ttl and...

ashutosh•12/27/23, 5:50 PM

It hasn't expired. I generated another request, few minutes after the first one failed, using exactly same method and it worked for same asset. And again another request generated using exactly same method has failed. The ttl is not too short to have caused the issue.

Chaika•12/27/23, 6:08 PM

Interesting.. I would guess something else is wrong with the signature/mac then, or if you're letting clients generate the timestamp it could be off. I haven't used hmac myself much before, I can say normal custom rules look fine right now and update in less then a few seconds.

CChaika Interesting.. I would guess something else is wrong with the signature/mac then,...

ashutosh•12/27/23, 6:10 PM

Okay, let me try to debug more. Interesting thing is that it was working fine until few hours back, but then it suddenly started blocking requests without any change in the rule or code which generates the token.

Cyb3r-Jak3•12/27/23, 6:34 PM

Ticket is probably your best bet

Chaika•12/27/23, 6:37 PM

I don't recall issues like that with WARP but when I was using it for private networking stuff I used Split Tunnels and just included the private networking ranges/domains so the rest of my traffic wasn't tunneled. Might be a workaround depending on how you use it

SStupeFied i've tried turning off proxy, but i see the same issue as well

Chaika•12/27/23, 6:44 PM

yea all proxy would do is stop sending stuff to gateway iirc, it's still being sent over the VPN, unlike if you used split tunnels to exclude it entirely

shots.by.luke•12/28/23, 3:29 AM

mjchesley•12/28/23, 3:37 AM

cloudflare hates me...

mjchesley•12/28/23, 3:39 AM

Mmjchesley Click to see attachment

Cyb3r-Jak3•12/28/23, 3:58 AM

You need to open a billing ticket here: https://dash.cloudflare.com/?to=/:account/support

mjchesley•12/28/23, 3:59 AM

Thanks!

smyth•12/28/23, 7:16 AM

keval-mandalik•12/28/23, 9:17 AM

Hey Team,

I need guidance on below error screenshot attached

I have purchaded domain and subdomain on godaddy now I have pointed out that sub domain to cloudflare worker URL but it's giving error which I have attached appreciate your help

Thanks

Erisa•12/28/23, 9:33 AM

You CNAMEd to something that youre not allowed to CNAME to - in the case of a Worker, the only way to access those is over a Custom Domain or Worker Route with the domain on Cloudflare as either a zone or a Custom Hostname

EErisa You CNAMEd to something that youre not allowed to CNAME to - in the case of a Wo...

keval-mandalik•12/28/23, 10:12 AM

can u pls elaborate?

Erisa•12/28/23, 10:13 AM

On which part? I'd need to know more about your setup

Erisa•12/28/23, 10:13 AM

Is the domain using Cloudflare? Where did you point it?

keval-mandalik•12/28/23, 10:14 AM

subdomain i have purchased xyz.example.com I am pointing that xyz to my worker URL

UPD I temporarily paused cloudflare on one of the sites. A few days passed and statistics appeared o

Similar Threads

Similar Threads

Similar Threads