If its about using workers as an origin I actually do agree that part is confusing. You need to add

R

rob•1/9/24, 2:35 AM

well i want a user to be able to use their own domain, add it to our platform, then it gets added as a custom domain to a worker we have, that worker has logic to route / fetch content based on the origgin URL in the CF request info

R

rob•1/9/24, 2:35 AM

thats how i was writing it out , doing it in the handler worker js code

U

UnsmartOP•1/9/24, 2:39 AM

Yep you would do as I said above then

R

rob•1/9/24, 2:40 AM

ive nevr done it that way. Ive always jsut makde a worker, then adding "custom domains" inside the worker setting menu

R

rob•1/9/24, 2:40 AM

and thne just worte hte logic in the handleRequest parto f the worker to fetch based on the url that was hit

U

UnsmartOP•1/9/24, 2:41 AM

Custom domains are only for your own domains. You do it the way I said for the cloudflare for saas domains

R

rob•1/9/24, 2:42 AM

i see ok

R

rob•1/9/24, 2:43 AM

and you need Cloudflare for SaaS for that?

R

rob•1/9/24, 2:43 AM

I only have Cloudflare for workers

U

UnsmartOP•1/9/24, 2:44 AM

Cloudflare for SaaS is available to everyone, and yes you need it. So if you are enterprise and it doesnt let you use the pay-go version you would need to get it added to your contract

R

rob•1/9/24, 2:45 AM

Yes i enabled it i see it now

R

rob•1/9/24, 2:45 AM

in the ssl-tls/custom-hostnames section

U

UnsmartOP•1/9/24, 2:45 AM

yes

R

rob•1/9/24, 2:46 AM

still ab it confused but ill see whats up

D

DevEros•1/14/24, 6:14 AM

Hi everyone,

C

cosbgn•1/22/24, 9:27 PM

Any chance to access a beta/early version of worker-for-platforms without being enterprise?

Ccosbgn Any chance to access a beta/early version of worker-for-platforms without being ...

H

Hello, I’m Allie!•1/22/24, 9:28 PM

I would recommend writing a bit about your usecase. No guarantees, but it would help the team if they do decide to give access

C

cosbgn•1/22/24, 9:30 PM

I'm building unfetch.com - we combine large language models with APIs. Pretty much you can use chatgpt to access data on Stripe, Shopify or any external service you have.

This is working great, but for more complex use cases (e.g. fetch all my stripe past due users and add them to a spreadsheet) only endpoints are not enough, so I'm experimenting with letting GPT-4 write some code and I need a secure environment where to run it (i.e. cloudflare for platforms)

C

cosbgn•1/22/24, 9:32 PM

My main issue currently is with deploy limits. Since the code is generated, say my app receive 20K messages a day, I would need to deploy 20K different workers.

I'm not sure if it can be done.

C

cosbgn•1/22/24, 9:33 PM

Usual use cases have something like 10 deploys per customers and 10K request, I could have 10K deploys and 10K request (i.e. the code runs once and then in most cases will never run again)

C

cosbgn•1/22/24, 9:34 PM

I wouldn't need custom domains or anything like that

Ccosbgn I'm building unfetch.com - we combine large language models with APIs. Pretty mu...

V

Vero•1/25/24, 2:59 PM

Hi, just gave you access. Let me know if you have any feedback

C

cosbgn•1/26/24, 7:01 AM

Amazing, thanks!

C

cosbgn•1/26/24, 7:01 AM

Will check it out right away

C

cosbgn•1/26/24, 7:10 AM

@Vero

actually I do have a quick question, I can't seem to find any example which uses an external library from

npm

npm

Are external libraries allowed?

K

kian•1/26/24, 7:14 AM

Workers itself doesn't handle dependencies, you bundle the dependencies with something like esbuild (which Wrangler uses)

C

cosbgn•1/26/24, 7:25 AM

Would something like this work:

import { someFunction } from 'https://esm.sh/some-library';

import { someFunction } from 'https://esm.sh/some-library';

import { someFunction } from 'https://esm.sh/some-library';

import { someFunction } from 'https://esm.sh/some-library';

K

kian•1/26/24, 7:30 AM

Nope

K

kian•1/26/24, 7:31 AM

Code must be bundled at deploy time, you can't use URL imports/eval/new Function

C

cosbgn•1/26/24, 7:36 AM

Ok

R

rob•1/28/24, 4:56 PM

So if we want users to be able to add their own custom domaisn to point to our tracker worker, what would our process be>

https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/start/getting-started/

Is Following this the right way to go? We arent an enterprise customer but we do have cloudflare for SaaS enabled

Configuring Cloudflare for SaaS · Cloudflare for Platforms docs

Get started with Cloudflare for SaaS

U

UnsmartOP•1/28/24, 5:00 PM

Yes, as step 1 says in the doc it works on the free plan

R

rob•1/28/24, 5:00 PM

@tony So I think we gotta do this:

R

rob•1/28/24, 5:01 PM

or do we use the API to add a route to the worker? its just a little convuluted for me to understand right now

R

rob•1/28/24, 5:03 PM

this is where i need to be right, but doing it via API when a user adds a domain on our frontend.

U

UnsmartOP•1/28/24, 5:05 PM

The API creates the custom hostname which will make it routable to your cloudflare zone and generate SSL certs.

Routing the custom hostnames to a worker is a different step and depends on how you want to do it.

If you want all custom hostnames to go to a single worker you would do the following:

In your zone go to workers routes and create 3 routes:

yourdomain.com/*

yourdomain.com/*

yourdomain.com/*

yourdomain.com/* ->

None

None

*.yourdomain.com/*

*.yourdomain.com/*

*.yourdomain.com/*

*.yourdomain.com/* ->

None

None

*/*

*/*

->

The Worker To Route Custom Hostnames

The Worker To Route Custom Hostnames

The Worker To Route Custom Hostnames

The Worker To Route Custom Hostnames

See image for example setup of workers routes:

T

tonytheonly•1/28/24, 5:07 PM

Thank you

UUnsmart The API creates the custom hostname which will make it routable to your cloudfla...

T

tonytheonly•1/30/24, 2:04 PM

when using the api for the custom hostname I am using the global api key in the X-Auth-Email and X-Auth-Key but I am getting an authentication error:

{
  method: 'POST',
  headers: {
    'X-Auth-Email': <GLOBAL_API_KEY>,
    'X-Auth-Key': <GLOBAL_API_KEY>,
    'Content-Type': 'application/json'
  },
  body: '{"hostname":"app.example.com","ssl":{"bundle_method":"ubiquitous","certificate_authority":"google","method":"txt","settings":{"ciphers":["ECDHE-RSA-AES128-GCM-SHA256","AES128-SHA"],"early_hints":"on","http2":"on","min_tls_version":"1.2","tls_1_3":"on"},"type":"dv","wildcard":true}}'
}
https://api.cloudflare.com/client/v4/zones/<MY_ZONE_ID>/custom_hostnames
{
  success: false,
  errors: [ { code: 10000, message: 'Authentication error' } ]
}

{
  method: 'POST',
  headers: {
    'X-Auth-Email': <GLOBAL_API_KEY>,
    'X-Auth-Key': <GLOBAL_API_KEY>,
    'Content-Type': 'application/json'
  },
  body: '{"hostname":"app.example.com","ssl":{"bundle_method":"ubiquitous","certificate_authority":"google","method":"txt","settings":{"ciphers":["ECDHE-RSA-AES128-GCM-SHA256","AES128-SHA"],"early_hints":"on","http2":"on","min_tls_version":"1.2","tls_1_3":"on"},"type":"dv","wildcard":true}}'
}
https://api.cloudflare.com/client/v4/zones/<MY_ZONE_ID>/custom_hostnames
{
  success: false,
  errors: [ { code: 10000, message: 'Authentication error' } ]
}

{
  method: 'POST',
  headers: {
    'X-Auth-Email': <GLOBAL_API_KEY>,
    'X-Auth-Key': <GLOBAL_API_KEY>,
    'Content-Type': 'application/json'
  },
  body: '{"hostname":"app.example.com","ssl":{"bundle_method":"ubiquitous","certificate_authority":"google","method":"txt","settings":{"ciphers":["ECDHE-RSA-AES128-GCM-SHA256","AES128-SHA"],"early_hints":"on","http2":"on","min_tls_version":"1.2","tls_1_3":"on"},"type":"dv","wildcard":true}}'
}
https://api.cloudflare.com/client/v4/zones/<MY_ZONE_ID>/custom_hostnames
{
  success: false,
  errors: [ { code: 10000, message: 'Authentication error' } ]
}

{
  method: 'POST',
  headers: {
    'X-Auth-Email': <GLOBAL_API_KEY>,
    'X-Auth-Key': <GLOBAL_API_KEY>,
    'Content-Type': 'application/json'
  },
  body: '{"hostname":"app.example.com","ssl":{"bundle_method":"ubiquitous","certificate_authority":"google","method":"txt","settings":{"ciphers":["ECDHE-RSA-AES128-GCM-SHA256","AES128-SHA"],"early_hints":"on","http2":"on","min_tls_version":"1.2","tls_1_3":"on"},"type":"dv","wildcard":true}}'
}
https://api.cloudflare.com/client/v4/zones/<MY_ZONE_ID>/custom_hostnames
{
  success: false,
  errors: [ { code: 10000, message: 'Authentication error' } ]
}

custom_certificate is optional when adding a hostname via the api correct? i was able to add a custom hostname in the dashboard that is proxying our services correctly.
https://developers.cloudflare.com/api/operations/custom-hostname-for-a-zone-create-custom-hostname

and the <MY_ZONE_ID> and <GLOBAL_API_KEY> are logging locally correctly just made them variables in this message for security.

Cloudflare API Documentation

Interact with Cloudflare's products and services via the Cloudflare API

T

tonytheonly•1/30/24, 8:49 PM

So the documentation for the fetch api is misleading. I was not able to properly authenticate with the api_email / api_key but instead with Authorization headers

async function createCustomHostname(c: Context) {
  const { CF_API_KEY, CF_ZONE_ID } = env<{ CF_API_KEY: string, CF_ZONE_ID: string }>(c)
  const content = await c.req.json<any>();
  const headers = {
    'Authorization': `Bearer ${CF_API_KEY}`,
     'Content-Type': 'application/json',
   };

  try {
    const options = {
      method: 'POST',
      headers: headers,
      body: JSON.stringify({ 
        "hostname": content.url, 
        "ssl": { 
          "bundle_method": "ubiquitous", 
          "method": "txt", 
          "settings": { 
            "ciphers": ["ECDHE-RSA-AES128-GCM-SHA256", "AES128-SHA"], 
            "early_hints": "on", 
            "http2": "on", 
            "min_tls_version": "1.2", 
            "tls_1_3": "on" 
          }, 
          "type": "dv", 
          "wildcard": false 
        } 
      })
    };
    const response = await fetch(`${BASE_URL}/zones/${CF_ZONE_ID}/custom_hostnames`, options)
    const json = await response.json()
    return json
  } catch (error) {
    console.error(`Error creating custom hostname: ${error}`);
    throw error;
  }
}

async function createCustomHostname(c: Context) {
  const { CF_API_KEY, CF_ZONE_ID } = env<{ CF_API_KEY: string, CF_ZONE_ID: string }>(c)
  const content = await c.req.json<any>();
  const headers = {
    'Authorization': `Bearer ${CF_API_KEY}`,
     'Content-Type': 'application/json',
   };

  try {
    const options = {
      method: 'POST',
      headers: headers,
      body: JSON.stringify({ 
        "hostname": content.url, 
        "ssl": { 
          "bundle_method": "ubiquitous", 
          "method": "txt", 
          "settings": { 
            "ciphers": ["ECDHE-RSA-AES128-GCM-SHA256", "AES128-SHA"], 
            "early_hints": "on", 
            "http2": "on", 
            "min_tls_version": "1.2", 
            "tls_1_3": "on" 
          }, 
          "type": "dv", 
          "wildcard": false 
        } 
      })
    };
    const response = await fetch(`${BASE_URL}/zones/${CF_ZONE_ID}/custom_hostnames`, options)
    const json = await response.json()
    return json
  } catch (error) {
    console.error(`Error creating custom hostname: ${error}`);
    throw error;
  }
}

async function createCustomHostname(c: Context) {
  const { CF_API_KEY, CF_ZONE_ID } = env<{ CF_API_KEY: string, CF_ZONE_ID: string }>(c)
  const content = await c.req.json<any>();
  const headers = {
    'Authorization': `Bearer ${CF_API_KEY}`,
     'Content-Type': 'application/json',
   };

  try {
    const options = {
      method: 'POST',
      headers: headers,
      body: JSON.stringify({ 
        "hostname": content.url, 
        "ssl": { 
          "bundle_method": "ubiquitous", 
          "method": "txt", 
          "settings": { 
            "ciphers": ["ECDHE-RSA-AES128-GCM-SHA256", "AES128-SHA"], 
            "early_hints": "on", 
            "http2": "on", 
            "min_tls_version": "1.2", 
            "tls_1_3": "on" 
          }, 
          "type": "dv", 
          "wildcard": false 
        } 
      })
    };
    const response = await fetch(`${BASE_URL}/zones/${CF_ZONE_ID}/custom_hostnames`, options)
    const json = await response.json()
    return json
  } catch (error) {
    console.error(`Error creating custom hostname: ${error}`);
    throw error;
  }
}

async function createCustomHostname(c: Context) {
  const { CF_API_KEY, CF_ZONE_ID } = env<{ CF_API_KEY: string, CF_ZONE_ID: string }>(c)
  const content = await c.req.json<any>();
  const headers = {
    'Authorization': `Bearer ${CF_API_KEY}`,
     'Content-Type': 'application/json',
   };

  try {
    const options = {
      method: 'POST',
      headers: headers,
      body: JSON.stringify({ 
        "hostname": content.url, 
        "ssl": { 
          "bundle_method": "ubiquitous", 
          "method": "txt", 
          "settings": { 
            "ciphers": ["ECDHE-RSA-AES128-GCM-SHA256", "AES128-SHA"], 
            "early_hints": "on", 
            "http2": "on", 
            "min_tls_version": "1.2", 
            "tls_1_3": "on" 
          }, 
          "type": "dv", 
          "wildcard": false 
        } 
      })
    };
    const response = await fetch(`${BASE_URL}/zones/${CF_ZONE_ID}/custom_hostnames`, options)
    const json = await response.json()
    return json
  } catch (error) {
    console.error(`Error creating custom hostname: ${error}`);
    throw error;
  }
}

U

UnsmartOP•1/30/24, 8:51 PM

Its generally not recommended to use the global api key and to instead use user api keys which use bearer auth. Is interesting that it doesnt work with the global api key but thats probably for the better anyways

T

tonytheonly•1/30/24, 8:51 PM

Yes I have created a token for the dns changes and it seems to work

T

tonytheonly•1/31/24, 7:58 PM

A quick follow up question, it seems like the validation cert is not being returned in the response for the post hostname api. I would expect response.data.ssl.validation_records

But the response is:

result: {
    id: '85efa926-8179-4c81-926e-eced6009ad63',
    hostname: 'test.exampleDomain.com',
    ssl: {
      id: 'de9b5334-8757-4b5f-85a9-5bcf3a4f0919',
      type: 'dv',
      method: 'txt',
      status: 'initializing',
      settings: [Object],
      wildcard: false,
      certificate_authority: 'google'
    },
    status: 'pending',
    ownership_verification: {
      type: 'txt',
      name: '_cf-custom-hostname.test.exampleDomain.com',
      value: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    ownership_verification_http: {
      http_url: 'http://test.exampleDomain.com/.well-known/cf-custom-hostname-challenge/85efa926-8179-4c81-926e-eced6009ad63',
      http_body: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    created_at: '2024-01-31T19:55:43.182431Z'
  },
  success: true,
  errors: [],
  messages: []
}

result: {
    id: '85efa926-8179-4c81-926e-eced6009ad63',
    hostname: 'test.exampleDomain.com',
    ssl: {
      id: 'de9b5334-8757-4b5f-85a9-5bcf3a4f0919',
      type: 'dv',
      method: 'txt',
      status: 'initializing',
      settings: [Object],
      wildcard: false,
      certificate_authority: 'google'
    },
    status: 'pending',
    ownership_verification: {
      type: 'txt',
      name: '_cf-custom-hostname.test.exampleDomain.com',
      value: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    ownership_verification_http: {
      http_url: 'http://test.exampleDomain.com/.well-known/cf-custom-hostname-challenge/85efa926-8179-4c81-926e-eced6009ad63',
      http_body: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    created_at: '2024-01-31T19:55:43.182431Z'
  },
  success: true,
  errors: [],
  messages: []
}

result: {
    id: '85efa926-8179-4c81-926e-eced6009ad63',
    hostname: 'test.exampleDomain.com',
    ssl: {
      id: 'de9b5334-8757-4b5f-85a9-5bcf3a4f0919',
      type: 'dv',
      method: 'txt',
      status: 'initializing',
      settings: [Object],
      wildcard: false,
      certificate_authority: 'google'
    },
    status: 'pending',
    ownership_verification: {
      type: 'txt',
      name: '_cf-custom-hostname.test.exampleDomain.com',
      value: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    ownership_verification_http: {
      http_url: 'http://test.exampleDomain.com/.well-known/cf-custom-hostname-challenge/85efa926-8179-4c81-926e-eced6009ad63',
      http_body: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    created_at: '2024-01-31T19:55:43.182431Z'
  },
  success: true,
  errors: [],
  messages: []
}

result: {
    id: '85efa926-8179-4c81-926e-eced6009ad63',
    hostname: 'test.exampleDomain.com',
    ssl: {
      id: 'de9b5334-8757-4b5f-85a9-5bcf3a4f0919',
      type: 'dv',
      method: 'txt',
      status: 'initializing',
      settings: [Object],
      wildcard: false,
      certificate_authority: 'google'
    },
    status: 'pending',
    ownership_verification: {
      type: 'txt',
      name: '_cf-custom-hostname.test.exampleDomain.com',
      value: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    ownership_verification_http: {
      http_url: 'http://test.exampleDomain.com/.well-known/cf-custom-hostname-challenge/85efa926-8179-4c81-926e-eced6009ad63',
      http_body: '7bd6536e-dc3d-46ba-974a-9e608090a3aa'
    },
    created_at: '2024-01-31T19:55:43.182431Z'
  },
  success: true,
  errors: [],
  messages: []
}

T

tonytheonly•1/31/24, 7:58 PM

@Unsmart | Tech debt

S

Sunil Kumar•2/1/24, 6:40 AM

I'm working on a small project i.e.., A user can install there subdomain path form main domain

ex :- hashnode.com //main domain
sunilkumar.hashnode.dev //sub domain like that

we have personal access token to access particular details of a user and later we need to check like what are available domains on the user and we need to take which domain you need to install like that

by using workers how can i achieve this problem .

can anyone help me out the best way to achieve and also some insights and resources
@unsmart

SSunil Kumar I'm working on a small project i.e.., A user can install there subdomain path f...

S

Sunil Kumar•2/1/24, 6:41 AM

@john.spurlock can you share some insights and resources to continue with my project

R

rob•2/2/24, 9:44 PM

so what if a client is hosting their domain on cloudflar managing their dns, will it create an issue if they add a cname to our SaaS worker?

R

rob•2/2/24, 9:48 PM

Do i want it proxied or not ? if i was a hypothetical customer ?

R

rob•2/2/24, 9:53 PM

trackflow.cosmic.marketing redirected you too many times.
Try deleting your cookies.
ERR_TOO_MANY_REDIRECTS

trackflow.cosmic.marketing redirected you too many times.
Try deleting your cookies.
ERR_TOO_MANY_REDIRECTS

trackflow.cosmic.marketing redirected you too many times.
Try deleting your cookies.
ERR_TOO_MANY_REDIRECTS

trackflow.cosmic.marketing redirected you too many times.
Try deleting your cookies.
ERR_TOO_MANY_REDIRECTS

R

rob•2/2/24, 9:53 PM

It's in our custom hostnames so it should be working

R

rob•2/3/24, 5:06 AM

@tony

If its about using workers as an origin I actually do agree that part is confusing. You need to add

Similar Threads

Similar Threads

Similar Threads