Cloudflare Developers•2y ago

Not multiple people but a member of the team (and related roles) can globally "killswitch" their ser

Not multiple people but a member of the team (and related roles) can globally "killswitch" their service in an incident

WWalshy Not multiple people but a member of the team (and related roles) can globally "k...

kev-ac•2/14/24, 11:04 PM

Where we'll be back to the root of hate or love chaos...

WalshyOP•2/14/24, 11:06 PM

#ILoveChaos

Chaika•2/14/24, 11:06 PM

it's not a true test unless you go and unplug the entire DC again ;p

WalshyOP•2/14/24, 11:07 PM

i'll get DC team on it

CChaika it's not a true test unless you go and unplug the entire DC again ;p

kev-ac•2/14/24, 11:08 PM

Why do I have the scene from South Park in my head where Kyle disconnects "the internet" while reading this message? Must kindof feel like it. For those who remember: https://www.youtube.com/watch?v=ckIMuvumYrg

Original message was deleted

Chaika•2/14/24, 11:10 PM

iirc it just looks up region1.v2.argotunnel.com / region2.v2.argotunnel.com and tries a bunch of the IPs

CChaika it's not a true test unless you go and unplug the entire DC again ;p

Erisa•2/14/24, 11:11 PM

Do it https://www.cloudflarestatus.com/incidents/0j9638c9ddxm

Control Plane Test on Thursday, February 15th, 2024

Chaika•2/14/24, 11:14 PM

in the original version it looks like it would just keep trying until it gets one that works

Chaika•2/14/24, 11:14 PM

it looks like its more complex now though

Chaika•2/14/24, 11:15 PM

https://github.com/cloudflare/cloudflared/blob/56aeb6be65d35314dbbca8730f5e645e89813ef3/edgediscovery/allregions/discovery.go#L112

Chaika•2/15/24, 1:05 AM

it's the pretest before the real test

Chaika•2/15/24, 1:05 AM

hmm mine seems fine but maybe fixed or regional

Sschack Is Cloudflare protected against this: https://www.theregister.com/2024/02/13/dns...

Cyb3r-Jak3•2/15/24, 4:00 AM

I’m guessing so given they say they reached out to all major DNS vendors for patching

Sschack Yeah makes sense, just asking since there is no mention on the blog

Cyb3r-Jak3•2/15/24, 4:07 AM

Yeah they call out Google and Cloudflare at the top but then only have a quote from a Google spokesperson

WWalshy i'll get DC team on it

Kasumi•2/15/24, 5:41 AM

Would be nice to get a new room tour or so from some CF offices and some QA's

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 6:22 AM

does Zero Trust tunneling provide SSL cert?

EE1337 NOTORඞOUS The PRESTඞGඞOUS does Zero Trust tunneling provide SSL cert?

undefined•2/15/24, 6:32 AM

yes it does

Kasumi•2/15/24, 6:47 AM

Such things are not allowed right?

Uundefined yes it does

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 7:02 AM

that's weird...it didn't work when i used subdomain of subdomain

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 7:02 AM

because cf pages covers that

EE1337 NOTORඞOUS The PRESTඞGඞOUS that's weird...it didn't work when i used subdomain of subdomain

undefined•2/15/24, 7:05 AM

i think it only works with subdomain.domain.com if you want multiple subdomains do something like this sub2-sub1.domain.com

Uundefined i think it only works with subdomain.domain.com if you want multiple subdomains ...

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 7:05 AM

so it doesn't work...welp

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 7:05 AM

cauz i wanted subdomain of subdomain

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 7:05 AM

RIP

undefined•2/15/24, 7:05 AM

yep you can't do that

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 7:06 AM

unlike cf pages

E1337 NOTORඞOUS The PRESTඞGඞOUS•2/15/24, 7:07 AM

yes which defeats the purpose

undefined•2/15/24, 7:07 AM

i know, and its paid

Original message was deleted

Erisa•2/15/24, 10:14 AM

Open a Support ticket and we'll take care of it

Original message was deleted

Erisa•2/15/24, 10:14 AM

Only using Spectrum (because spectrum has toggles for both v4 and v6)

Erisa•2/15/24, 10:15 AM

Spectrum HTTPS can be used to get regular proxy traffic flowing through the ipv6-only hostname

Erisa•2/15/24, 10:18 AM

:meowsad:

Erisa•2/15/24, 10:18 AM

ipv6-only worker that returns cf-connecting-ip: https://ipv6.erisa.uk/

SupItsTom•2/15/24, 11:11 AM

am i right in saying zone tag is not the same as zone id

Erisa•2/15/24, 11:12 AM

Its the same

Erisa•2/15/24, 11:12 AM

Hexadecimal id right?

SupItsTom•2/15/24, 11:14 AM

i dont know its why im asking

SupItsTom•2/15/24, 11:14 AM

i see graphql wants a zonetag and i wasnt sure if it was the zone id or something else

Erisa•2/15/24, 11:16 AM

Its the same thing, don't worry about it

Erisa•2/15/24, 11:16 AM

Sometimes theyre called tags

SupItsTom•2/15/24, 11:19 AM

ah okay thank you for clarifying

GrimValor•2/15/24, 11:50 AM

EErisa ipv6-only worker that returns cf-connecting-ip: https://ipv6.erisa.uk/

Isaac McFadyen•2/15/24, 1:36 PM

No ipv6

Isaac McFadyen•2/15/24, 1:37 PM

Darn Starlink :lul:

Original message was deleted

Kasumi•2/15/24, 1:38 PM

Sadge same thing

EErisa ipv6-only worker that returns cf-connecting-ip: https://ipv6.erisa.uk/

fernvenue•2/15/24, 2:27 PM

How you can resolve your domain to Cloudflare services with only IPv6?

fernvenue•2/15/24, 2:28 PM

:poggies:

Not multiple people but a member of the team (and related roles) can globally "killswitch" their ser

Similar Threads

Similar Threads

Similar Threads