Cloudflare Developers•2y ago

Yes, but not every node library is supported

AAcе Yes, but not every node library is supported

gonsalo•4/21/24, 7:44 PM

is there any list that shows the available ones?

Ggonsalo is there any list that shows the available ones?

AcеOP•4/21/24, 7:45 PM

Yep it’s here: https://developers.cloudflare.com/workers/runtime-apis/nodejs/

Cloudflare Docs

Node.js compatibility · Cloudflare Workers docs

Implemented Node.js runtime APIs and enablement instructions for your Worker project.

gonsalo•4/21/24, 7:46 PM

liam | helius.dev•4/21/24, 7:48 PM

Is there any way to inline a wrangler env or can you only use json or toml?

Chaika•4/21/24, 11:50 PM

only normal if you're doing a lot in the global scope/initial request, for small scripts like a hello world script the cold start is unnoticable (it takes advantage of the TLS time to elimate cold starts in a lot of cases)

Chaika•4/21/24, 11:52 PM

https://blog.cloudflare.com/eliminating-cold-starts-with-cloudflare-workers
I would also question how exactly you are measuring cold starts

Ryan Djurovich•4/22/24, 6:34 AM

New encryption/decryption library designed for use with Cloudflare Workers / Pages:

simple-secure-webcrypto
https://www.npmjs.com/package/simple-secure-webcrypto

IMO it was more difficult than it should be to find a simple way to encrypt and decrypt data on Cloudflare Workers/Pages. I thought I'd package up my solution to doing this and share it in the hope it will help others.

It's as simple as:

const encryptedData = await encrypt(secret, data);
    const decryptedData = await decrypt(secret, encryptedData);

const encryptedData = await encrypt(secret, data);
    const decryptedData = await decrypt(secret, encryptedData);

where I expected you'd just store the secret as an encrypted environment variable in Workers/Pages.

Under the hood it uses Web Crypto APIs / SubtleCrypto so it has zero package dependencies, and it's using the AES-GCM algorithm for encryption and SHA-256 for HMAC of the IV.

I'd love to get some review and feedback from anyone willing!

npm

simple-secure-webcrypto

Simple and secure encrypt/decrypt functions using Web Crypto API and no dependencies. Latest version: 1.0.2, last published: 7 minutes ago. Start using simple-secure-webcrypto in your project by running

npm i simple-secure-webcrypto

npm i simple-secure-webcrypto

. There are no other projects in the npm registry using simple-secure-webcrypto.

Original message was deleted

Ryan Djurovich•4/22/24, 6:56 AM

great question Leo! GCM checks ciphertext, but when the IV cannot be trusted (e.g. user input such as a Cookie) it must be verified AFAIK?

Original message was deleted

Ryan Djurovich•4/22/24, 7:00 AM

That is what I understood originally was one of the key benefits of GCM. However, as I was working on this I found some docs to suggest you still need to verify the integrity of the IV if you cannot trust the source of it during decrypt. Are you able to point me at any documentation I can use as a reference for this?

For example, MDN explicitly mentions ciphertext is verified but no mention of IV: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt#aes-gcm

MDN Web Docs

SubtleCrypto: encrypt() method - Web APIs | MDN

The encrypt() method of the SubtleCrypto interface encrypts data.

Original message was deleted

Ryan Djurovich•4/22/24, 7:11 AM

you're right, just reading the official paper at https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf it explicitly lists "the ciphertext, the AAD, the IV, or the tag"

Original message was deleted

Ryan Djurovich•4/22/24, 7:23 AM

can you elaborate?

Original message was deleted

Ryan Djurovich•4/22/24, 7:29 AM

JWE contains additional fields too which in the context of this use case wouldn't make sense to store

Original message was deleted

Ryan Djurovich•4/22/24, 7:35 AM

so i take it https://github.com/mdn/dom-examples/blob/main/web-crypto/encrypt-decrypt/aes-gcm.js is not padding correctly either?

GitHub

dom-examples/web-crypto/encrypt-decrypt/aes-gcm.js at main · mdn/do...

Code examples that accompany various MDN DOM and Web API documentation pages - mdn/dom-examples

Original message was deleted

Ryan Djurovich•4/22/24, 7:39 AM

don't think this is very fair to say, I'm using Web Crypto here, not rolling my own. I'm trying to improve the DX of implementing Web Crypto, because I haven't been able to find any straightforward packages which help close the gap from SubtleCrypto interface to a simple function call. Also appreciate your feedback, have started working on a v2 branch which takes out the HMAC: https://github.com/Nadrama-com/simple-secure-webcrypto/tree/v2

will publish it as a package once I get some additional feedback, would appreciate any further review and input

GitHub

GitHub - Nadrama-com/simple-secure-webcrypto at v2

Simple and secure encrypt/decrypt functions using Web Crypto API and no dependencies - GitHub - Nadrama-com/simple-secure-webcrypto at v2

onnimonni•4/22/24, 9:05 AM

Has anyone been able to succesfully query parquet files in R2 bucket through workers?

Jinx ジンクス•4/22/24, 2:19 PM

So I have searched already quite a bit but I'm not sure where or how I unsubscribe from these daily notifications that I reached 50% of my free tier capacity

... I know I'm above 50% and it is fine, it resets daily. But every single day I get 2 - 3 emails from Cloudflare: [Cloudflare]: 50% of daily usage limit for Cloudflare Workers KV operations reached.

Simply put, I'd like to unsubscribe or manage treshold for these notifications and I don't know where or how to do it.

Mitya•4/22/24, 4:36 PM

There are so many seemingly random errors that show up in Wrangler when developing locally that it makes development a bain at times. I raised two such issues last week but have heard nothing back. Any chance a CF dev could take a look at them? Many thanks.

VI•4/22/24, 5:51 PM

I need to pin my workers close to my DB, I'm using smart placement for this.

When enabled, I see a "unsupported backend service" even though I'm only calling Planetscale DB in my worker.

https://developers.cloudflare.com/workers/configuration/smart-placement/#unsupported-back-end-services

Cloudflare Docs

Smart Placement (beta) · Cloudflare Workers docs

Speed up your Worker application by automatically placing your workloads in an optimal location that minimizes latency.

Pato•4/22/24, 6:05 PM

Hey! If i have multiple cloduflare accounts, and need to be pushing changes with wrangler constantly. Is there a way to do that with out having to log in and out in the CLI?

PPato Hey! If i have multiple cloduflare accounts, and need to be pushing changes with...

Hello, I’m Allie!•4/22/24, 6:08 PM

Have a single account with access to all of the other accounts

Hello, I’m Allie!•4/22/24, 6:08 PM

It should then allow you to publish to them

Pato•4/22/24, 6:09 PM

I can't do that, each account is for a different job

PPato I can't do that, each account is for a different job

Hello, I’m Allie!•4/22/24, 6:10 PM

You could provide an API token as an env var?

CLOUDFLARE_API_TOKEN

CLOUDFLARE_API_TOKEN

I believe

Pato•4/22/24, 6:10 PM

an add that to the variables in the wrangler.toml?

PPato an add that to the variables in the wrangler.toml?

Hello, I’m Allie!•4/22/24, 6:11 PM

No, I meant an Env Var in the console

Hello, I’m Allie!•4/22/24, 6:11 PM

CLOUDFLARE_API_TOKEN=someToken wrangler pages deploy dir

CLOUDFLARE_API_TOKEN=someToken wrangler pages deploy dir

Pato•4/22/24, 6:12 PM

ohh okay, and instead of login in i just use the api token each time/

PPato ohh okay, and instead of login in i just use the api token each time/

Hello, I’m Allie!•4/22/24, 6:12 PM

Yup

Pato•4/22/24, 6:13 PM

thats clever haha

Pato•4/22/24, 6:13 PM

thanks!

mihaaai•4/22/24, 6:52 PM

With the worker pricing model change I have a question about Service Bindings that I cannot fully confirm based on old similar questions and the current docs.
If I have a Cloudflare Pages project that does SSR on a page (then triggering a worker request through it's adapter) and I need to request an endpoint on a Hono API that is deployed on another Worker (on a different subdomain) and I wire them as Service Bindings, do I still trigger 2 requests each time a user refreshes the page or the counter get's only the Pages request against my limit?

Mmihaaai With the worker pricing model change I have a question about Service Bindings th...

Hello, I’m Allie!•4/22/24, 6:54 PM

At the moment, a call to a Service Binding is billed as a new request

HHello, I’m Allie!At the moment, a call to a Service Binding is billed as a new request

mihaaai•4/22/24, 6:55 PM

From current docs I understand that the request to the Hono API will just count against the subrequests of the Pages Worker
https://developers.cloudflare.com/workers/runtime-apis/bindings/service-bindings/#limits
So to avoid a double request I'm supposed to move all the backend logic from my main API to the Pages SSR request? That's unfortunate

Cloudflare Docs

Service bindings - Runtime APIs · Cloudflare Workers docs

Facilitate Worker-to-Worker communication.

Mmihaaai From current docs I understand that the request to the Hono API will just count ...

Hello, I’m Allie!•4/22/24, 6:59 PM

At the moment anyway. There was a discussion about making service binding calls free, but haven't seen anything new on that front yet

Unsmart•4/22/24, 7:01 PM

Subrequests are just any network call, you arent billed on subrequests. Service bindings specifically call another worker and all worker requests are billed regardless of request method which is why calling service bindings has a charge.

UUnsmart Subrequests are just any network call, you arent billed on subrequests. Service ...

Hello, I’m Allie!•4/22/24, 7:05 PM

Though note, because of the architecture of Service Bindings, the bound Worker should already be in memory, and thus calling it is almost like calling a function within your Worker directly(which I suspect is why they might want to make Service Binding calls free).

mihaaai•4/22/24, 7:07 PM

Thanks for the quick reply, hope to also have at least 2 chained requests for free in the future, anyway not sure again about the content of this article https://blog.cloudflare.com/service-bindings-ga being still valid, I understand that many changes have happened since it has been written, but having an api-gatewayapi-gateway like architecture with workers (aka triggering 4+ requests only to have a login token returned) it's too expensive in the long run, only the security from the subworkers isolation might be a perk.

The Cloudflare Blog

Service Bindings are generally available, with efficient pricing

Service bindings are an API that facilitate Worker-to-Worker communication. You can invoke other Workers directly from your code; making it possible to communicate with shared services. We’ll also make it cost-efficient to run multiple Workers.

Mmihaaai Thanks for the quick reply, hope to also have at least 2 chained requests for fr...

Unsmart•4/22/24, 7:09 PM

It might be "expensive" for personal use but for companies even 4 requests is still only $1.20/million (+ some cpu time). My work does about $15-20/million requests comparitively on AWS so theres that

Mmihaaai Thanks for the quick reply, hope to also have at least 2 chained requests for fr...

kian•4/22/24, 7:48 PM

https://x.com/irvinebroque/status/1776331933129253290

Brendan Irvine-Broque (@irvinebroque) on X

@sperand_io @elithrar @Cloudflare Two things here:

We are working on (couldn't quite make it for this week) a change where when you call another Worker via a service binding, this won't be billed as a request. (so that pricing doesn't disincentivize breaking apart an app into many Workers) Coming soon.

Twitter

•

4/5/24, 7:31 PM

King•4/22/24, 11:57 PM

Hello everyone, Is it possible to send emails with attachments using the mailchannels plugin? Or has this feature not been implemented?

andrew•4/23/24, 1:45 AM

Is anyone successfully seeing unobfuscated stack traces in the exception output of the real time logs?

andrew•4/23/24, 1:45 AM

i've got upload_source_maps = true upload_source_maps = true and i'm still not seeing them

andrew•4/23/24, 1:46 AM

i'm also watching for exceptions. i'm not merely looking at a console.log of the error.stackerror.stack

andrew•4/23/24, 1:47 AM

This page says stack traces go into open beta on apr 15th. that's in the past, but also pretty recent. so maybe they're just not rolled out yet? https://developers.cloudflare.com/workers/observability/source-maps/

andrew•4/23/24, 2:26 AM

i opened a docs issue here - https://github.com/cloudflare/cloudflare-docs/issues/14194