Not sure if the friendly bots stuff supports fetching a list periodicially but I guess that isn't th
Not sure if the friendly bots stuff supports fetching a list periodicially but I guess that isn't the worst
EYou can throw that in an IP list but you'd have to update it occasionally
EThey do, this would work
EYeeep
EI forget what the free limit is for list items
EYeah
EThen you can reference it in a custom rule
EI mean you already were making a rule based on user-agent so this can replace it
KFor your own lists/rules? No
KYou could hit the API to do it though
EThats a part of Verified Bots
ESo you would have to submit it there and hope for the best
KChange
BetterUptime to betteruptimeKNo caps
EAnd then click create and once it exists you can start adding things to it
EYou are indeed, theres no input when creating
EYou create it and then populate it
EIf you put the text cursor in the first one and then paste the whole list it should fill in the entire list, but not sure if that functionality works on a phone
EAmazing
EOnly on Enterprise or Partner accounts
EIf not I'd recommend signing up for a new account and then inviting the first email to be a member of it
EThat makes sense, hopefully we can find a way to improve that experience, I know teams are aware of that ask
EYou'd have to manually transform those into /64 which you probably would need to use a computer for
ECould write a script for it I suppose
Ahmm disabling cache isnt a configuration rule
Aseems to only be a page rule
![𝔜𝔞𝔫𝔤[matt]](https://cdn.discordapp.com/avatars/1104127802833387541/2f71d080168d200e75efd8d02255f409.webp?size=40)
�Does cloudflare host websites
EIts a Cache Rule, which you can find under Cache tab
Aoh.. different place from other rules
![𝔜𝔞𝔫𝔤[matt]](https://cdn.discordapp.com/avatars/1104127802833387541/2f71d080168d200e75efd8d02255f409.webp?size=16)
ESometimes but not always, we have a product https://pages.cloudflare.com/ which allows hosting websites. But it's also possible to proxy a website hosted elsewhere through Cloudflare
�Who would recommend for hosting
Athanks 
Awhats your question?
Shey I just read the conversation about IP whitelisting above and I have a question: is there something inherently wrong with using secrets in user agents for whitelisting requests? For example suppose I generate a user agent per user like
xyz bot secret=abcdefgh... and ask them to add it as a rule to WAFKIt's a lot harder for them to come from your IPs than it is for them to simply send the
User-Agent request header, but IPs aren't fool-proof either - they might be from shared infra, a stale list means IPs no-longer under your control are still whitelisted, etcKA mixture of both is best, but IPs are better than UAs generally since they require the ability to send traffic from that IP.
KIf that secret got out, it's not useful to anyone if your customers also only allowed your IPs.
KIs the chance of that secret getting out likely? Probably not.
Syep - always a risk of the secret being leaked. But it's easier for me since I use a lot of shared ips (aws lambda, fly.io, cloudflare workers, etc)
Sjust wanted to make sure I'm not missing something super obvious that voids this idea haha
Sthanks!
DDBut the good question is, do you actually want to blindly add the subnets to your whitelist?
At least for those six ones:
These are all Linode SLAAC ranges, where each VM will get one individual /128 IPv6 address per default.
Alone adding them as as a Skip rule would make all Linode customers be able to access your site, WITHOUT your defence being active.
At least for those six ones:
These are all Linode SLAAC ranges, where each VM will get one individual /128 IPv6 address per default.
Alone adding them as as a Skip rule would make all Linode customers be able to access your site, WITHOUT your defence being active.
DBut that's where you're ending, by sanitizing them to /64.
DYou're welcome, - just remember the "fine print" in the following message.
�Who would you recommend for hosting ?
Adepends on whats being hosted. I use cloudflare for lots of stuff, and have some servers on vultr
DIt's everything from https://uptime.betterstack.com/ips.txt, but without duplicates:
sanitized to /64 will both become:
sanitized to /64 will both become:
D2400:8907::/64 would for example be there three times without deduplication.DI'd say anything from instant to the upper limit of Cache-Control here, assuming you aren't manually purging? 
