What's the Custom Rule Expression & the details of the request that got blocked (blurring anything s
What's the Custom Rule Expression & the details of the request that got blocked (blurring anything sensitive)?
Aif (starts_with(http.request.uri.path, "/<initial_part_of_path>/") and not is_timed_hmac_valid_v0(<secret_key>, http.request.uri, <ttl>, http.request.timestamp.sec, <separator_length>)) then block else allow
ARequest: <public_domain_of_the_bucket>/<initial_part_of_path>/<rest_of_path_to_the_asset><separator><timestamp>-<generated_token>
CSo sounds like it just wasn't valid. Was it already expired based on the ttl and timestamp, or something else perhaps?
AIt hasn't expired. I generated another request, few minutes after the first one failed, using exactly same method and it worked for same asset. And again another request generated using exactly same method has failed. The ttl is not too short to have caused the issue.
CInteresting.. I would guess something else is wrong with the signature/mac then, or if you're letting clients generate the timestamp it could be off. I haven't used hmac myself much before, I can say normal custom rules look fine right now and update in less then a few seconds.
AOkay, let me try to debug more. Interesting thing is that it was working fine until few hours back, but then it suddenly started blocking requests without any change in the rule or code which generates the token.
CTicket is probably your best bet
CI don't recall issues like that with WARP but when I was using it for private networking stuff I used Split Tunnels and just included the private networking ranges/domains so the rest of my traffic wasn't tunneled. Might be a workaround depending on how you use it
Cyea all proxy would do is stop sending stuff to gateway iirc, it's still being sent over the VPN, unlike if you used split tunnels to exclude it entirely
Suh
Mcloudflare hates me...
M
CMThanks!
Shy
KHey Team,
I need guidance on below error screenshot attached
I have purchaded domain and subdomain on godaddy now I have pointed out that sub domain to cloudflare worker URL but it's giving error which I have attached appreciate your help
Thanks
I need guidance on below error screenshot attached
I have purchaded domain and subdomain on godaddy now I have pointed out that sub domain to cloudflare worker URL but it's giving error which I have attached appreciate your help
Thanks
EYou CNAMEd to something that youre not allowed to CNAME to - in the case of a Worker, the only way to access those is over a Custom Domain or Worker Route with the domain on Cloudflare as either a zone or a Custom Hostname
Kcan u pls elaborate?
EOn which part? I'd need to know more about your setup
EIs the domain using Cloudflare? Where did you point it?
Ksubdomain i have purchased xyz.example.com I am pointing that xyz to my worker URL
EHow did you point it? And is it using Cloudflare?
If you are just doing
If you are just doing
CNAME xyz.example.com thing.name.workers.dev then this will not work as you need to add a Custom Domain or Route to the Worker and the Worker needs to be on the same account that the domain is also active on, OR you need to create a Custom Hostname on the account with the Worker
THi, I'm using Image Resizing without storage and would like to migrate to new pricing model. Can anyone help me, how to do that?
ETry point 6 on https://community.cloudflare.com/t/community-tip-best-practices-remove-account-account-management-username-account-name/81704
if not, point 2 says to just ask us in a ticket
if not, point 2 says to just ask us in a ticket
EUser details edit
ENote that zendesk syncs on login so you might have to relog on the portal after changing
Ebut yes if it still doesnt work just open a ticket
EThere are magic buttons we can press to do it for you
CLoads for me. What errors are you seeing?
DIs there any downside with Smart Tiered Cache? It's free right?
DNot sure why I have it disabled
CIf your origin is anycast like CDN -> CDN it would pick a single location to put everything through which wouldn't work well latency wise lol
Cif all your origins are simple unicast/not more then one location per ip should be fine though, it'll just pick a location nearby to check and more cache hits.
You can see all of the locations it picks for each Origin IP when its on
You can see all of the locations it picks for each Origin IP when its on
DDoes this have a bit of delay? Did a few requests that have
cf-cache-status: HIT from a Worker and it's still zeros
CThere is def some delay. Keep in mind there are some exceptions too, for example R2 Custom Domains won't use Tiered Caching
