ok, but I was not expecting to have this much traffic 🤔 on a domain bought ~2 weeks ago from anoth

ok, but I was not expecting to have this much traffic

on a domain bought ~2 weeks ago from another registrar and moved it to Cloudflare 2 days ago. I don't know if this is normal or not but I had 852 requests in the last 24 hours

HHello, I’m Allie!Do like that one post recently, and just throw them an error instead of upgradin...

TothWOP•6/7/24, 2:08 PM

do you happen to have the link to that post?

TTothW do you happen to have the link to that post?

Chaika•6/7/24, 2:09 PM

it was more about APIs then clients: https://jviide.iki.fi/http-redirects

Chaika•6/7/24, 2:10 PM

should still redirect clients. If you want to have less clients you need to redirect, enable HSTS within CF with a length of 12 months and then go to hsts preload and get your website hsts preloaded

TTothW ok, but I was not expecting to have this much traffic 🤔 on a domain bought ~2 ...

Chaika•6/7/24, 2:13 PM

pretty normal yea. You get spikes of traffic from Certs being renewed/issues and bots stalking CT logs and picking up on it/scanning the site. For example, here's the traffic on one of my zones blocked by a rule which simply blocks all .php.php and wp-wp- requests

Chaika•6/7/24, 2:15 PM

there's never been any php or wp on that site so no chance of being legit, and those are purely the silly bots trying exploits/scanning being flagged there, mostly in spikes. They say the internet is more bots then humans in overall requests these days lol

TothWOP•6/7/24, 3:17 PM

Thank you all for the answers, I will look more into it these days. Until then if you have any links to tutorials that explain what settings you should turn on or common WAF rules to add for cloudflare pages I would appreciate it.

AA•6/7/24, 4:01 PM

I'm beginning to suspect that a fetch call being made by my next/pages app is being cached... Is this a possibility?

AA•6/7/24, 4:01 PM

If so. How do I stop it

AA•6/7/24, 4:03 PM

If I rebuild the app it doesn't even correct it.. but if I alter the fetch(query) slightly i get correct results

AA•6/7/24, 4:06 PM

I wonder if this is the issue. https://developers.cloudflare.com/workers/reference/how-the-cache-works/#:~:text=%E2%80%8B%E2%80%8B%20fetch,zone's%20cache%20(or%20Worker).

Cloudflare Docs

How the Cache works · Cloudflare Workers docs

How Workers interacts with the Cloudflare cache.

Brandon | Cloudflare TSE•6/7/24, 9:23 PM

I was reading a few Community posts about 500s being served for random .js files. They were older posts, but apparently the issue is back for some customers. I know Walshy was in here asking for details from some folks - was a fix or cause ever discovered?

BBrandon | Cloudflare TSE I was reading a few Community posts about 500s being served for random .js files...

Chaika•6/7/24, 9:27 PM

there was this thread: I get 500 response from pages without any functions and escalation https://discord.com/channels/595317990191398933/1105165969032220752/1245885676273008641 about it, idk what went from there. Might just have to ask the blob

CChaika there was this thread: https://discord.com/channels/595317990191398933/124584691...

Brandon | Cloudflare TSE•6/7/24, 9:40 PM

I found the escalation. Nothing of note yet.

Mehul Mohan•6/8/24, 1:41 PM

Hello! I had a question regarding cloudflare pages. When adding a subdomain to a cloudflare pages project, we get the option to add it with CNAME or add DNS to cloudflare.

We're thinking of using cloudflare for our multi-tenant cloudflare pages project however domains are hosted outside of cloudflare and cannot be brought in cloudflare. How do we enable WAF on custom domains this way?

We can ask our customers to allow us to add their subdomain to our cloudflare account but that requires business plan for every domain we add (that's $250/domain/month). Is there any other way?

piffie•6/8/24, 2:29 PM

hey guys - still getting an warning using cloudflare pages-action - that it uses an outdated node.js 16 - seems there was no new version in a year.

SML•6/8/24, 5:38 PM

https://www.cloudflarestatus.com/incidents/5t270n2ndf0h This has been up for 3 days. Can I expect this to be semi fixed soonish because I need to upgrade my workers plan and it wouldn’t let me.

Billing issues relating to subscription adjustments

SSML https://www.cloudflarestatus.com/incidents/5t270n2ndf0h This has been up for 3 d...

Chaika•6/8/24, 7:07 PM

If you don't have any unpaid invoices that you can pay (per the instructions on there), I would make a ticket if you haven't already

MMehul Mohan Hello! I had a question regarding cloudflare pages. When adding a subdomain to a...

Chaika•6/8/24, 7:18 PM

Is there any other way?

Sure, there's one other option. You can use CF for SaaS/SSL/TLS -> Custom Hostnames on your own account. You can then leverage WAF on that zone (would need Pro or higher just on that one), it just runs through it like normal. You get 100 Custom Hostnames for free and then pay 10 cents per month per hostname over. The tricky bit is that you can't point your fallback domain at Pages since Pages itself uses CF for SaaS, so you have to use a Worker (and pay for each invocation) or wait for Snippets to roll out further/come out of alpha which have no execution costs, ex:
customer.com -> cname -> yourzone.com -> worker/snippet -> pages.dev

You can even use Custom Metadata attached to each hostname to configure security level and such in your zone's Custom Rules: https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/security/waf-for-saas/.

Cloudflare Docs

WAF for SaaS · Cloudflare for Platforms docs

Web Application Firewall (WAF) allows you to create additional security measures through Cloudflare. As a SaaS provider, you can link custom rules, …

sekku🍣🌞•6/8/24, 7:19 PM

Hello, I've problem on pages build

I'm using nextjs, and the build are fine until the last deployment.
Today I'm pushing a small changes, but somehow it won't build.

I got the size limit error, but the size are not much different from the previous deployment. (which is over 1MiB)
<= Prev deployment (currently deployed) | New deployment (failed to build) =>

Is it a bug on next-on-pages? or something else?

CChaika > Is there any other way? Sure, there's one other option. You can use CF for Saa...

Mehul Mohan•6/8/24, 8:11 PM

Yes thanks! Just discovered cloudflare for saas after writing that message. Amazing product, thanks!

BBrandon | Cloudflare TSE I was reading a few Community posts about 500s being served for random .js files...

か

かっこかり•6/9/24, 6:15 AM

We have the same problem and have read the thread. Should we create another support thread for our case, or just watch the thread to see how it goes?

CChaika If you don't have any unpaid invoices that you can pay (per the instructions on ...

SML•6/9/24, 7:11 AM

i don’t have any unpaid tickets. I didn’t know that i was supposed to make a ticket. Thanks! As a UX designer, I would recommend tweaking the language on the error messages because it’s unclear (even with the full page long version) that the recommendation for people without unpaid ticket is to open one

BBrandon | Cloudflare TSE I was reading a few Community posts about 500s being served for random .js files...

harshjv•6/9/24, 8:52 AM

facing the same issue. deployment id: 9e4ea0f3-58ef-4827-87e7-1a7f4b5b3f72

Hharshjv facing the same issue. deployment id: 9e4ea0f3-58ef-4827-87e7-1a7f4b5b3f72

DiAvisoo•6/9/24, 9:39 AM

@Brandon | Cloudflare TSE Same here. 500 for random css and js files. dep id 5061f269-5303-41c1-883e-ad980bc52114

This is my first experience with CF and first impressions matter. Just hope this can get resolved quickly, or that it will be addressed at least.

DDiAvisoo <@1116145234007556106> Same here. 500 for random css and js files. dep id 5061f...

DiAvisoo•6/9/24, 9:55 AM

Got an update to this. My original build had ~2500 files and everything was uploaded successfully through wrangler. Several random js and css files got 500-error however when accessing them. The amount of files are due to articles on the site.
I did a test now and only prerendered part of the articles, ending up with 1050 files, and deployed that. Now everything on CF works and there are no 500-errors, but I need to be able to publish all my articles.

DDiAvisoo Got an update to this. My original build had ~2500 files and everything was uplo...

harshjv•6/9/24, 12:20 PM

Number of files shouldn't be an issue. CF Pages allows up to 20,000 files (https://developers.cloudflare.com/pages/platform/limits/#files)

harshjv•6/9/24, 12:21 PM

I had to roll back to a previous deployment since all new deployments have this issue, but i need to deploy ASAP

DDiAvisoo Got an update to this. My original build had ~2500 files and everything was uplo...

Walshy•6/9/24, 1:04 PM

very confused why this is happening... can you please share a repro URL?
Same for you @harshjv

Walshy•6/9/24, 1:05 PM

(actually moving to forum, easier to track - https://canary.discord.com/channels/595317990191398933/1249285733416439838)

TothWOP•6/9/24, 1:18 PM

Hello everybody I am a little bit confused. I have this WAF rule to bloc all requests from HTTP/1.0 and HTTP/1.1 but I see some events first went through bot fight mode, cloudflare gave the managed challenge and then passed my WAF even though the request came from HTTP/1.1. Is there any way to block this?

Walshy•6/9/24, 1:21 PM

That's only blocking HTTP rather than HTTPS

Walshy•6/9/24, 1:22 PM

You can use HTTPS over HTTP/1.1

Walshy•6/9/24, 1:22 PM

(HTTP just means HTTP requests over plain text while HTTPS is HTTP encrypted)

Walshy•6/9/24, 1:22 PM

There's probably a protocol version field or something you can use

Walshy•6/9/24, 1:23 PM

ah yeah:

Walshy•6/9/24, 1:23 PM

https://i.walshy.dev/hdf4oTNUBMCFhgQsUN.png

Walshy•6/9/24, 1:23 PM

"HTTP Version"

Walshy•6/9/24, 1:23 PM

do a rule like that and you can block /1.0 and /1.1

Walshy•6/9/24, 1:24 PM

(also, this is not the right channel for WAF stuff - this is for the Pages product -- general-discussions )

TothWOP•6/9/24, 1:36 PM

You are right, thank you. Yes, my bad, I've asked here because I am trying to set up the security for a cloudflare page MeowHeartCloudflare

. I will use the other channel.

cosetto•6/9/24, 2:37 PM

Hello everyone, I have a question to ask.
How to make r2 become a resource folder in page?
For example, my page is "example.page.dev", and I want to access the r2 files under "example.page.dev/asset"