Some frameworks allow you to use bindings while in dev, but that is up to the framework you are usin
Some frameworks allow you to use bindings while in dev, but that is up to the framework you are using to support it
BAny plugins for vite?
HVite itself, not that I know of.
HBut some frameworks built on top of Vite do support it
Bcurrently, I have to run
remix vite:build && npx wrangler pages dev build/client which is slow if I use file watcher to re-run thisBany way to make this faster
H
AAMy minecraft server (java edition)
Getting ddos attack how can i defend it
Getting ddos attack how can i defend it
AI already connect the domain with cloudflare but still getting ddos attack
C?pings
FPlease do not ping community members for non-moderation reasons. Doing so will not solve your issue faster and will make people less likely to want to help you.
ASorry
CYou're in the wrong channel too, this is for Cloudflare Pages. Normal Proxy cannot help you with ddos attacks against Minecraft
ADo you have some way to help me with that?
ACloudflare can't protect my server?
CNot on free plan, free is just HTTP/Websites. There is Cloudflare Spectrum but it's prohibitively expensive ($1/gb, and need Pro at $25/mo to use it). If you want to talk more about it, please move to general-discussions or create a post in general-help
AThanks
BI am using remix vite spa mode and functions directory with hono
BIt doesn't run functions directory
HWhen using an SSR framework, you must use their API route system, not the functions folder
BRemix has a spa option too
BWhich is their non-SSR mode
HThen I'm not sure you can do anything there...
HThe only supported option currently is for your framework to pull in bindings for API routes. But you are building for a static export, I'm not sure there is much to be done
THello, I am new to cloudflare and I've deployed a page as test 2 days ago and I've checked the traffic TLS over the last 24 hours which seem kind of odd.
It has 29% none secure traffic.
Am I missing some setting? I have "Always use https" and also set minimum TLS Version to 1.2
Should I remove the "Always use https" and just let TLS?
It has 29% none secure traffic.
Am I missing some setting? I have "Always use https" and also set minimum TLS Version to 1.2
Should I remove the "Always use https" and just let TLS?
TYes but this still doesn't really explain the high number of insecure requests, how can I check if these are bots? In the bots events are just about 10% events from the insecure requests
TAlso my traffic seems abnormally high for a website I just deployed less than 48 hours ago
TI want to try and check for problems before I do a full deployment in Cloudflare
HDo like that one post recently, and just throw them an error instead of upgrading them
Chsts preloading can help too, at avoiding those redirects
Tok, but I was not expecting to have this much traffic on a domain bought ~2 weeks ago from another registrar and moved it to Cloudflare 2 days ago. I don't know if this is normal or not but I had 852 requests in the last 24 hours
on a domain bought ~2 weeks ago from another registrar and moved it to Cloudflare 2 days ago. I don't know if this is normal or not but I had 852 requests in the last 24 hoursTdo you happen to have the link to that post?
CCshould still redirect clients. If you want to have less clients you need to redirect, enable HSTS within CF with a length of 12 months and then go to hsts preload and get your website hsts preloaded
Cpretty normal yea. You get spikes of traffic from Certs being renewed/issues and bots stalking CT logs and picking up on it/scanning the site. For example, here's the traffic on one of my zones blocked by a rule which simply blocks all
.phpwp-
Cthere's never been any php or wp on that site so no chance of being legit, and those are purely the silly bots trying exploits/scanning being flagged there, mostly in spikes. They say the internet is more bots then humans in overall requests these days lol
TThank you all for the answers, I will look more into it these days. Until then if you have any links to tutorials that explain what settings you should turn on or common WAF rules to add for cloudflare pages I would appreciate it.
AI'm beginning to suspect that a fetch call being made by my next/pages app is being cached... Is this a possibility?
AIf so. How do I stop it
AIf I rebuild the app it doesn't even correct it.. but if I alter the fetch(query) slightly i get correct results
AI wonder if this is the issue. https://developers.cloudflare.com/workers/reference/how-the-cache-works/#:~:text=%E2%80%8B%E2%80%8B%20fetch,zone's%20cache%20(or%20Worker).
Cloudflare Docs
How Workers interacts with the Cloudflare cache.
BI was reading a few Community posts about 500s being served for random .js files. They were older posts, but apparently the issue is back for some customers. I know Walshy was in here asking for details from some folks - was a fix or cause ever discovered?
Cthere was this thread: I get 500 response from pages without any functions and escalation https://discord.com/channels/595317990191398933/1105165969032220752/1245885676273008641 about it, idk what went from there. Might just have to ask the blob
BI found the escalation. Nothing of note yet.
MHello! I had a question regarding cloudflare pages. When adding a subdomain to a cloudflare pages project, we get the option to add it with CNAME or add DNS to cloudflare.
We're thinking of using cloudflare for our multi-tenant cloudflare pages project however domains are hosted outside of cloudflare and cannot be brought in cloudflare. How do we enable WAF on custom domains this way?
We can ask our customers to allow us to add their subdomain to our cloudflare account but that requires business plan for every domain we add (that's $250/domain/month). Is there any other way?
We're thinking of using cloudflare for our multi-tenant cloudflare pages project however domains are hosted outside of cloudflare and cannot be brought in cloudflare. How do we enable WAF on custom domains this way?
We can ask our customers to allow us to add their subdomain to our cloudflare account but that requires business plan for every domain we add (that's $250/domain/month). Is there any other way?
Phey guys - still getting an warning using cloudflare pages-action - that it uses an outdated node.js 16 - seems there was no new version in a year.
Shttps://www.cloudflarestatus.com/incidents/5t270n2ndf0h This has been up for 3 days. Can I expect this to be semi fixed soonish because I need to upgrade my workers plan and it wouldn’t let me.
CIf you don't have any unpaid invoices that you can pay (per the instructions on there), I would make a ticket if you haven't already
CIs there any other way?Sure, there's one other option. You can use CF for SaaS/SSL/TLS -> Custom Hostnames on your own account. You can then leverage WAF on that zone (would need Pro or higher just on that one), it just runs through it like normal. You get 100 Custom Hostnames for free and then pay 10 cents per month per hostname over. The tricky bit is that you can't point your fallback domain at Pages since Pages itself uses CF for SaaS, so you have to use a Worker (and pay for each invocation) or wait for Snippets to roll out further/come out of alpha which have no execution costs, ex:
customer.com -> cname -> yourzone.com -> worker/snippet -> pages.dev
You can even use Custom Metadata attached to each hostname to configure security level and such in your zone's Custom Rules: https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/security/waf-for-saas/.
Cloudflare Docs
Web Application Firewall (WAF) allows you to create additional security measures through Cloudflare. As a SaaS provider, you can link custom rules, …
