Cloudflare Developers•2y ago

If you're fine with the latency, it would be cheaper then KV

zach•3/21/24, 1:26 AM

that egress

CChaika If you're fine with the latency, it would be cheaper then KV

sirhype•3/21/24, 1:27 AM

tbh bundling is probably the better option. it just feels hacky

ChaikaOP•3/21/24, 1:27 AM

I have a few workers which bundle stuff and use Github Actions to update every 12 hours, works fine

sirhype•3/21/24, 1:27 AM

ok that makes me feel better LOL

ChaikaOP•3/21/24, 1:27 AM

certainly no issue with updating a worker that frequently, I do one every minute for other testing purposes

sirhype•3/21/24, 1:27 AM

Sounds like I've found my solution, I appreciate the help!

Dex•3/21/24, 1:51 AM

Hi I'm Dexter!

Faith•3/21/24, 5:20 AM

Best so far

Sailesh•3/21/24, 6:48 AM

hi im sailesh

Kasumi•3/21/24, 12:20 PM

Is https://www.cloudflare.com/en/ips/ up to date?

IP Ranges | Cloudflare

This page is intended to be the definitive source of Cloudflare’s current IP ranges.

KKasumi Is https://www.cloudflare.com/en/ips/ up to date?

Isaac McFadyen•3/21/24, 12:25 PM

Should be, yes.

Isaac McFadyen•3/21/24, 12:26 PM

Keep in mind it doesn't include some IPs (mainly WARP IPs I believe) intentionally.

Kasumi•3/21/24, 12:35 PM

But why all Cloudflare requests are getting blocked or so

Kasumi•3/21/24, 12:36 PM

THe weirdest thing is I never get any CLoudflare IP's. Just Digital Ocean ones google ones and one from Russia.

Kasumi•3/21/24, 12:37 PM

Kasumi•3/21/24, 12:41 PM

Or ist Cloudflare Redirecting the Visitors IP Address to the origin?

Cyb3r-Jak3•3/21/24, 12:43 PM

That’s for ssh. It doesn’t go across Cloudflare unless you have spectrum.

Kasumi•3/21/24, 12:44 PM

I want to open my website

Kasumi•3/21/24, 12:44 PM

And I set my Firewall like that, that it only accepts Cloudflare IP's. But it rejects Cloudflare too and I dont get any Cloudfalre IP's logged that got rejected

Cyb3r-Jak3•3/21/24, 12:45 PM

Firewall for HTTP or SSH?

Kasumi•3/21/24, 12:45 PM

There are just a lot 45, 103, 79

CCyb3r-Jak3 Firewall for HTTP or SSH?

Kasumi•3/21/24, 12:45 PM

HTTP/S

KKasumi And I set my Firewall like that, that it only accepts Cloudflare IP's. But it re...

Isaac McFadyen•3/21/24, 12:45 PM

You're probably looking at the wrong logs.

Kasumi•3/21/24, 12:45 PM

Isaac McFadyen•3/21/24, 12:45 PM

Those logs won't show HTTP connections.

IIsaac McFadyen You're probably looking at the wrong logs.

Kasumi•3/21/24, 12:45 PM

Its the journal logs

IIsaac McFadyen Those logs won't show HTTP connections.

Kasumi•3/21/24, 12:46 PM

Firewalld should log everything and there are no different logs where I can look at

Kasumi•3/21/24, 12:56 PM

Doesnt cdn-cgi/trace show the CF origin ip?

KKasumi Doesnt cdn-cgi/trace show the CF origin ip?

ChaikaOP•3/21/24, 12:58 PM

no? How would it? It's not making a connection to your origin

Kasumi•3/21/24, 12:59 PM

I mean the CLoudflares Proxy IP

ChaikaOP•3/21/24, 12:59 PM

It shows your IP, but not Cloudflare's

Kasumi•3/21/24, 12:59 PM

How useless is this future then :shyyDead:

ChaikaOP•3/21/24, 12:59 PM

there's two types of CF Proxy IPs, the incoming ones (anycasted ones in your proxied a/aaaa records) and the outgoing ones (which CF uses to connect to your origin)

ChaikaOP•3/21/24, 1:00 PM

cdn-cgi doesn't show either

Kasumi•3/21/24, 1:00 PM

tcpdump doesnt help me in anyway because I dont want to go through all IP's that cloudflare has.

CChaika cdn-cgi doesn't show either

Kasumi•3/21/24, 1:00 PM

Yes useless af

Kasumi•3/21/24, 1:00 PM

Then I need to flush the Firewall and find a different way or so

Isaac McFadyen•3/21/24, 1:01 PM

If Cloudflare can't connect to your origin and you don't see anything in the logs then it's probably a firewall in front of your server.

Isaac McFadyen•3/21/24, 1:01 PM

Some cloud providers have a firewall that restricts connections to your server at all, even if the firewall on the server is compltely off.

IIsaac McFadyen If Cloudflare can't connect to your origin and you don't see anything in the log...

Kasumi•3/21/24, 1:01 PM

:Facepalm:

Kasumi•3/21/24, 1:01 PM

Yes theres a firewall between but the firewall has all CLoudflare IP's whitelisted

KKasumi Yes useless af

ChaikaOP•3/21/24, 1:01 PM

well, how would it though? It hasn't made a connection yet? Some connections are Argo Smart Routed, how would it know which IP that would come out of?
The only utility that shows Edge Server Origin IPs is HTTP Logpush iirc

Kasumi•3/21/24, 1:02 PM

But it still drops everything and I dont see any requests getting dropped by Cloudflare IP's

KKasumi Yes theres a firewall between but the firewall has all CLoudflare IP's whitelist...

Isaac McFadyen•3/21/24, 1:02 PM

Can you see the logs of that firewall or no?

IIsaac McFadyen Can you see the logs of that firewall or no?

Kasumi•3/21/24, 1:02 PM

Yes :shyyDead:

KKasumi Click to see attachment

Kasumi•3/21/24, 1:02 PM

KKasumi Click to see attachment

Kasumi•3/21/24, 1:02 PM