Are there any security risk of releasing your account hash? Guessing no because im trying to load i

Are there any security risk of releasing your account hash?

Guessing no because im trying to load images in the from end in the form of an image link from cloudflare but that contains the account hash

Ggreatalts Are there any security risk of releasing your account hash? Guessing no because...

Hello, I’m Allie!•3/12/24, 6:59 PM

There is not. For it to be usable, they would need access to your account

greataltsOP•3/12/24, 7:00 PM

Ok ok ty ty

Hello, I’m Allie!•3/12/24, 7:00 PM

And if they have access to your account already, then they can easily get your account id

greataltsOP•3/12/24, 7:00 PM

got it ty!

EverEdwin•3/12/24, 8:52 PM

using routes in cloudflare workers

CChaika do you know which WARP Colo you are connecting to? https://cloudflare.com/cdn-cg...

zach•3/12/24, 9:18 PM

i prefer https://fbi.gov/cdn-cgi/trace

CChaika Pages Custom Domains uses CF for SaaS under the hood, just like R2 Custom Domain...

zach•3/12/24, 9:19 PM

I was thinking about this earlier

zach•3/12/24, 9:19 PM

so that's why I can't set a pages host as my fallback

zach•3/12/24, 9:19 PM

makes sense

Zzach i prefer https://fbi.gov/cdn-cgi/trace

SageSphinx63920•3/12/24, 9:34 PM

Not related to the topic rn but are there more URLs like these provided by cloudflare?

SSageSphinx63920 Not related to the topic rn but are there more URLs like these provided by cloud...

Isaac McFadyen•3/12/24, 9:36 PM

If there are then they're not made public so we don't know

SageSphinx63920•3/12/24, 9:37 PM

So no other known

SageSphinx63920•3/12/24, 9:37 PM

SSageSphinx63920 Not related to the topic rn but are there more URLs like these provided by cloud...

Chaika•3/12/24, 9:42 PM

well what do you mean by that?
More things that run under cdn-cgi? There's quite a few: https://developers.cloudflare.com/fundamentals/reference/cdn-cgi-endpoint/
More debug information? https://help.teams.cloudflare.com/ has some special stuff for ZT.

CChaika well what do you mean by that? More things that run under cdn-cgi? There's quit...

Isaac McFadyen•3/12/24, 9:42 PM

Oh I wasn't aware that those were documented.

Isaac McFadyen•3/12/24, 9:42 PM

TIL, thanks for the information

CChaika well what do you mean by that? More things that run under cdn-cgi? There's quit...

SageSphinx63920•3/12/24, 9:45 PM

Exactly this

Chaika•3/12/24, 9:45 PM

it's just a few/as it says "examples include but not limited to", but those are probably the main ones.
Most features that inject code use cdn-cgi in some way. CF Fonts use /cdn-cgi/fonts or something like that, Rocket loader, Cloudflare Apps, etc

Isaac McFadyen•3/12/24, 9:47 PM

I believe Cloudflare-issued certificate renewal as well?

IIsaac McFadyen I believe Cloudflare-issued certificate renewal as well?

Chaika•3/12/24, 9:47 PM

for http those are /.well-known/acme-challenge/<token>/.well-known/acme-challenge/<token>

CChaika for http those are `/.well-known/acme-challenge/<token>`

Isaac McFadyen•3/12/24, 9:48 PM

Oh hmm. Maybe I'm incorrectly remembering then.

Isaac McFadyen•3/12/24, 9:48 PM

That makes sense but I seem to recall there being some other reason that an HTTP-only request needed to hit cdn-cgi/<something>

Chaika•3/12/24, 9:48 PM

Workers previews do, and Access can break them

CChaika Workers previews do, and Access can break them

Isaac McFadyen•3/12/24, 9:48 PM

Ah, maybe that's it then.

Chaika•3/12/24, 9:49 PM

Pages Custom Domains uses Http validation and Access used to break them too but iirc that's fixed now

.gwapes•3/12/24, 11:42 PM

Just me or the images part of the website just crops the side off

BooRuleDie•3/13/24, 8:19 AM

Hey guys, I work in a startup as a backend developer, and we're not currently using the cloud to host our apps. The problem is that we're taking so many SSH brute force attacks that a few days ago our server stopped responding for a few hours. I recommended using Cloudlfare for these types of DOS and DDOS attacks and also mentioned other cool features like CDN and all to my manager. He liked the idea a lot and started using Cloudflare for one of his personal websites to test Cloudflare.

My question is about pricing. For now, we're not planning to use any services from Cloudflare but DDOS protection, DNS, and CDN. Do we have to go professional or enterprise, or is it okay to keep using personal plan?

Pradyum•3/13/24, 10:51 AM

Hi, We have a cloudflare account after entering the password. We have been stuck over the two factor authentication. I don't have the backup code with me. I have been waiting for cloudflare mail from last 2 days.

dakom•3/13/24, 11:42 AM

hey all... google/firebase customer here, thinking of moving to cloudflare... what's the cloudflare way to setup static hosting such that:

it benefits from the CDN (is this automatic?)
I only want to deploy manually, not connected to a github repo
possibly - separate sites for the main website and static media (images, video, etc.)
on that not how to sync static media? e.g. lets say I have a large local folder with a bunch of images, and I've added one image- I'd like a tool that deploys without re-uploading everything (gsutil from google does this to cloud storage, for comparison)

Ddakom hey all... google/firebase customer here, thinking of moving to cloudflare... wh...

Hello, I’m Allie!•3/13/24, 11:47 AM

That sounds like Pages.

Automatic CDN+Cache
Deploy via the wranglerwrangler CLI. You can also use Github/lab, but you don't have to
If media needs to be separate, then you can use R2R2, but otherwise it should be fine to keep it in Pages.
All assets(media, html, css, js, etc.) are delta-uploaded, so that if they already exist in the cloud, they will not be uploaded again.

! -1 Abhijeet•3/13/24, 3:12 PM

Anyone knows how to dockerize the cloudflare worker app??? This is working but nothing shows up on localhost:8787

FROM node:20
WORKDIR /app
COPY package*.json ./
RUN npm install
RUN npx prisma generate
COPY . ./
ENV WRANGLER_SEND_METRICS=false
EXPOSE 8787
CMD [ "npm", "start" ]

docker run -p 8787:8787 -t new-image

Bb1urrybird Warp+ has consistently produced worse performance for me in Australia, Japan, Vi...

dave•3/13/24, 3:32 PM

I like WARP because sometimes local ISPs do very stupid routing. I also don't trust the internal security of most ISPs.

Ddave I like WARP because sometimes local ISPs do very stupid routing. I also don't tr...

az•3/13/24, 4:49 PM

what about their internal security specifically ?

Hammer•3/13/24, 6:11 PM

Is there a new datacenter between finland and sweden? didnt see one in status page or peeringdb

Unsmart•3/13/24, 6:12 PM

cloudflare adds datacenters all the time so maybe

HHammer Is there a new datacenter between finland and sweden? didnt see one in status pa...

Chaika•3/13/24, 6:15 PM

what's the airport code?

CChaika what's the airport code?

Hammer•3/13/24, 6:15 PM

it looks like somewhere in luelå/umeå, luleå is LLA and Umeå is UME

Hammer•3/13/24, 6:18 PM

https://www.cloudflare.com/network/

Cloudflare Global Network | Data Center Locations | Cloudflare

Exceptional performance, security and reliability for the modern enterprise, with a vast global network spanning hundreds of cities in 100+ countries.

Chaika•3/13/24, 6:20 PM

I think that might just be a mistake. They have dropdowns for each region on that page too, and only Helsinki in Finland and Stockholm/Gothenburg in Sweden are mentioned

Hammer•3/13/24, 6:20 PM

Chaika•3/13/24, 6:21 PM

I have LB healthchecks in all colos feeding into logpush which spit out into this: https://colo.cloudflare.chaika.me/, and I don't see anything else in those countries either. If it was routable I should have info from it

Chaika•3/13/24, 6:22 PM

I think a ghost colo/mistake lol, or maybe future plan?

Hammer•3/13/24, 6:23 PM

I thought they took my message lol