Hello, I was interested maybe someone can give me some insight. Have anyone used the combo of AWS Fa

Hello, I was interested maybe someone can give me some insight. Have anyone used the combo of AWS Fargate + CloudFlare R2 or Google Cloud Run + CloudFlare R2 , idea is esentially request comes to my container which is running on GCR or AWS, it does some manipulation and I am planning to save the document to the CloudFlare R2 and serve it from there, but so far I am struggling a little bit, with all the eggress and hidden fees. Maybe someone have done something similar ?

Rifki Ardiansyah - AstraWorld•3/1/24, 5:32 AM

Hallo, i need a help

MM19XX•3/1/24, 7:48 AM

Hi I only yhave 1
Question

MM19XX•3/1/24, 7:49 AM

Is Thierry anything I can do to bypass captcha,/

MM19XX•3/1/24, 7:49 AM

My name is Mario

thornAvery•3/1/24, 8:48 AM

Is there any way to see what permissions an api endpoint needs? Im trying to use the zones/{zone_id}/email/routing/rules/catch_allzones/{zone_id}/email/routing/rules/catch_all endpoint and I cant for the life of me figure out the permissions the api key needs to have (the same key is working on other endpoints with its current permissions)

1.1.1.1APP•3/1/24, 8:59 AM

DNS over Discord: A records

discord.com A @1.1.1.1 +noall +answerdiscord.com A @1.1.1.1 +noall +answer

NAME        | TTL  | DATA           
------------+------+----------------
discord.com | 219s | 162.159.135.232
discord.com | 219s | 162.159.128.233
discord.com | 219s | 162.159.138.232
discord.com | 219s | 162.159.137.232
discord.com | 219s | 162.159.136.232

NAME        | TTL  | DATA           
------------+------+----------------
discord.com | 219s | 162.159.135.232
discord.com | 219s | 162.159.128.233
discord.com | 219s | 162.159.138.232
discord.com | 219s | 162.159.137.232
discord.com | 219s | 162.159.136.232

diggy diggy hole

•

3/2/24, 5:03 AM

Original message was deleted

thornAvery•3/1/24, 9:02 AM

Already has all of those

do I need to like, wait a while after changing the permissions for them to settle?

thornAvery•3/1/24, 9:03 AM

its got Include: all account, all zones

thornAvery•3/1/24, 9:05 AM

;0;

thornAvery•3/1/24, 9:11 AM

and X-Auth-KeyX-Auth-Key and X-Auth-EmailX-Auth-Email headers are just the same key as the

Authorization

Authorization

header, minus BearerBearer right?

thornAvery•3/1/24, 9:12 AM

oh thats probably it then lol

Original message was deleted

Erisa•3/1/24, 9:18 AM

I remember raising this in the past, not sure why it wasn't fixed, for reference the correct doc is https://developers.cloudflare.com/fundamentals/setup/account/account-security/cloudflare-access/

</Wolf>•3/1/24, 2:20 PM

https://ptb.discord.com/channels/595317990191398933/1213066981968969738

VB•3/1/24, 5:59 PM

Does cloudflare images do automatic file format conversion? e.g. if I upload image to images in jpg format would it be converted to webp.

Erisa•3/1/24, 6:20 PM

Yes

Erisa•3/1/24, 6:20 PM

Its served as the most efficient format that the requesting browser supports, usually avif or webp

b-bear•3/1/24, 8:26 PM

does disabling proxy disable WAF and DDoS protection?

Bb-bear does disabling proxy disable WAF and DDoS protection?

Chaika•3/1/24, 8:27 PM

It exposes your origin directly for that hostname/record, and you lose the CDN, Protection, Caching, etc

Chaika•3/1/24, 8:27 PM

You'd only benefit from CF's super fast DNS

AAshley Is https://blog.cloudflare.com/secrets-store in beta yet, or any news on it? As ...

Bruce Lee•3/1/24, 8:27 PM

I'm looking for info on this as well. These would be a fantastic feature for an app I'm working on, and currently I've just stubbed out a service that dumps stuff into R2 until this becomes available.

CChaika It exposes your origin directly for that hostname/record, and you lose the CDN, ...

b-bear•3/1/24, 8:28 PM

okay, by protection that means ddos and waf?

Chaika•3/1/24, 8:28 PM

Yes, you have no ddos/waf from CF on an unproxied record

b-bear•3/1/24, 8:28 PM

got it ty

faye•3/1/24, 10:38 PM

So, I got a new UI on the workers & pages screen, but only on one of the pages, not the other ones. Is this a feature? A bug?
I also cannot view real-time logs anymore :(

faye•3/1/24, 10:41 PM

Well, the new UI seems to come to other pages now, but the not being able to view the logs is a bug I suppose
also one of the other pages that got the new UI just broke? lol

faye•3/1/24, 10:41 PM

so random

Walshy•3/1/24, 10:46 PM

that errors shows if there's no Function

Walshy•3/1/24, 10:46 PM

isn't related to ui work

Walshy•3/1/24, 10:47 PM

https://i.walshy.dev/id6wJSgle2RU3Q0X8Q.png

Walshy•3/1/24, 10:47 PM

logs working fine for me

WWalshy that errors shows if there's no Function

faye•3/1/24, 10:54 PM

I got functions though

faye•3/1/24, 10:55 PM

Also the entire site is like.. really broken and I have not a single clue why this is happening, just shows a 404 page (from notFound() in nextjs), on a static page? :2HAhaa:

SSciCat Hello, I was interested maybe someone can give me some insight. Have anyone used...

dave•3/2/24, 12:36 AM

we use Cloudflare R2 heavily as a data store for most of our Google Cloud Run projects.

KNOX•3/2/24, 4:07 AM

quick little question reguarding DNS

I know on cloudflare you have do subdomains like

subdomain.example.com

subdomain.example.com

but can you do

something.subdomain.example.com

something.subdomain.example.com

KKNOX quick little question reguarding DNS I know on cloudflare you have do subdomain...

Chaika•3/2/24, 4:09 AM

The only issue you'd hit, if it it was a web service you wanted to proxy, the default SSL/TLS Certificate Cloudflare gives you for free, which is your Universal Certificate, is a simple wildcard *.example.com, and wouldn't cover anything deeper then the first level

Chaika•3/2/24, 4:10 AM

You'd have to buy ACM (Adv. Cert Manager). Some Cloudflare products which offer Custom Domains like Pages, R2 Custom Domains, Worker Custom Domains, issue you certificates that would cover that if you were using them

KNOX•3/2/24, 4:11 AM

i see, thank you so much. I've tried to do it before but just could never get it to work. let me try to see if my ssl provider will allow it

Chaika•3/2/24, 4:12 AM

well the issue isn't your provider but Cloudflare, if you want it proxied/to take advantage of Cloudflare's CDN/Caching/DDoS Protection that is

Chaika•3/2/24, 4:12 AM

You could unproxy it and lose that all, and then you'd just need your provider to issue a certificate covering that

KNOX•3/2/24, 4:13 AM

so if i proxy it id have to use cloudflares ssl? sorry if im not understanding

Chaika•3/2/24, 4:15 AM

Right. Proxy uses Cloudflare's SSL Certificate, which you get a Universal one for free, which is a simple wildcard and covers your apex (

*.example.com

*.example.com

example.com

example.com

). Because of how SSL Certificates work, wildcards only ever cover one label or level of subdomains. You'd need a certificate covering

*.subdomain.example.com

*.subdomain.example.com

something.subdomain.example.com

something.subdomain.example.com

exact for it to work.
With Proxy enabled with a secure configuration, you need valid SSL at both ends
Visitor <- Cloudflare SSL -> Cloudflare <- Origin/Provider SSL -> Origin

Chaika•3/2/24, 4:19 AM

The DNS system is based off a hierarchy, separated by dots.

com

com

is operated by Versign,

example.com

example.com

is delegated/controlled by someone else,

test2.example.com

test2.example.com

could also be controlled/operated by someone else. Different levels can be controlled by different people, part of the reason why there's special rules around it like with SSL Certificates.

You could, for example, do

something-subdomain.example.com

something-subdomain.example.com

, using

rather then

, and you would have no issue with Cloudflare SSL covering it, the wildcard

*.example.com

*.example.com

universal certificate would cover it.

KNOX•3/2/24, 4:24 AM

so even if i have my own ssl for it cloudflare proxy wouldn't allow it?

KKNOX so even if i have my own ssl for it cloudflare proxy wouldn't allow it?

Chaika•3/2/24, 4:26 AM

Saying "it wouldn't allow it" is kind of implying CF is purposefully not allowing it. That's not the case. It's just that Cloudflare does not have a certificate by default which would cover/be valid for a subdomain deeper then the first level. You'd have to buy ACM and specifically issue a certificate (

*.subdomain.example.com

*.subdomain.example.com

something.subdomain.example.com

something.subdomain.example.com

), which would. Otherwise you'd just get cipher mismatch errors as CF doesn't have a certificate which would be valid to serve for that.

Chaika•3/2/24, 4:27 AM

(and Cloudflare needs to have its own valid certificate as it needs to be able to inspect the request for security/waf/firewall reasons, and be able to return responses, like block pages, without involving your origin. If it didn't have its own SSL, it wouldn't be able to do that)

KNOX•3/2/24, 4:32 AM

ahh, so even with my own ssl, id still need the ACM. Does ACM cover any of the sub.sub.example.com's i make. or would i have to make one for each?

KKNOX ahh, so even with my own ssl, id still need the ACM. Does ACM cover any of the s...

Chaika•3/2/24, 4:35 AM

Fundamentally SSL Certificate Wildcards only go one level deep. You can't issue

*.*.example.com

*.*.example.com

certificates for example, that's not valid. Wildcards always has to be on the left-most side, and only covers that same level.
so

*.example.com

*.example.com

-> covers sub.example.com, but not sub.sub.example.com (two levels),

*.sub.example.com

*.sub.example.com

-> covers sub.sub.example.com, but not sub.sub2.example.com, or example.sub2.sub.example.com

Hello, I was interested maybe someone can give me some insight. Have anyone used the combo of AWS Fa

Similar Threads

Similar Threads

Similar Threads