Hello! I had a question regarding cloudflare pages. When adding a subdomain to a cloudflare pages pr

Hello! I had a question regarding cloudflare pages. When adding a subdomain to a cloudflare pages project, we get the option to add it with CNAME or add DNS to cloudflare.

We're thinking of using cloudflare for our multi-tenant cloudflare pages project however domains are hosted outside of cloudflare and cannot be brought in cloudflare. How do we enable WAF on custom domains this way?

We can ask our customers to allow us to add their subdomain to our cloudflare account but that requires business plan for every domain we add (that's $250/domain/month). Is there any other way?

piffie•6/8/24, 2:29 PM

hey guys - still getting an warning using cloudflare pages-action - that it uses an outdated node.js 16 - seems there was no new version in a year.

SML•6/8/24, 5:38 PM

https://www.cloudflarestatus.com/incidents/5t270n2ndf0h This has been up for 3 days. Can I expect this to be semi fixed soonish because I need to upgrade my workers plan and it wouldn’t let me.

Billing issues relating to subscription adjustments

SSML https://www.cloudflarestatus.com/incidents/5t270n2ndf0h This has been up for 3 d...

Chaika•6/8/24, 7:07 PM

If you don't have any unpaid invoices that you can pay (per the instructions on there), I would make a ticket if you haven't already

MMehul Mohan Hello! I had a question regarding cloudflare pages. When adding a subdomain to a...

Chaika•6/8/24, 7:18 PM

Is there any other way?

Sure, there's one other option. You can use CF for SaaS/SSL/TLS -> Custom Hostnames on your own account. You can then leverage WAF on that zone (would need Pro or higher just on that one), it just runs through it like normal. You get 100 Custom Hostnames for free and then pay 10 cents per month per hostname over. The tricky bit is that you can't point your fallback domain at Pages since Pages itself uses CF for SaaS, so you have to use a Worker (and pay for each invocation) or wait for Snippets to roll out further/come out of alpha which have no execution costs, ex:
customer.com -> cname -> yourzone.com -> worker/snippet -> pages.dev

You can even use Custom Metadata attached to each hostname to configure security level and such in your zone's Custom Rules: https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/security/waf-for-saas/.

Cloudflare Docs

WAF for SaaS · Cloudflare for Platforms docs

Web Application Firewall (WAF) allows you to create additional security measures through Cloudflare. As a SaaS provider, you can link custom rules, …

sekku🍣🌞•6/8/24, 7:19 PM

Hello, I've problem on pages build

I'm using nextjs, and the build are fine until the last deployment.
Today I'm pushing a small changes, but somehow it won't build.

I got the size limit error, but the size are not much different from the previous deployment. (which is over 1MiB)
<= Prev deployment (currently deployed) | New deployment (failed to build) =>

Is it a bug on next-on-pages? or something else?

CChaika > Is there any other way? Sure, there's one other option. You can use CF for Saa...

Mehul MohanOP•6/8/24, 8:11 PM

Yes thanks! Just discovered cloudflare for saas after writing that message. Amazing product, thanks!

BBrandon | Cloudflare TSE I was reading a few Community posts about 500s being served for random .js files...

か

かっこかり•6/9/24, 6:15 AM

We have the same problem and have read the thread. Should we create another support thread for our case, or just watch the thread to see how it goes?

CChaika If you don't have any unpaid invoices that you can pay (per the instructions on ...

SML•6/9/24, 7:11 AM

i don’t have any unpaid tickets. I didn’t know that i was supposed to make a ticket. Thanks! As a UX designer, I would recommend tweaking the language on the error messages because it’s unclear (even with the full page long version) that the recommendation for people without unpaid ticket is to open one

BBrandon | Cloudflare TSE I was reading a few Community posts about 500s being served for random .js files...

harshjv•6/9/24, 8:52 AM

facing the same issue. deployment id: 9e4ea0f3-58ef-4827-87e7-1a7f4b5b3f72

Hharshjv facing the same issue. deployment id: 9e4ea0f3-58ef-4827-87e7-1a7f4b5b3f72

DiAvisoo•6/9/24, 9:39 AM

@Brandon | Cloudflare TSE Same here. 500 for random css and js files. dep id 5061f269-5303-41c1-883e-ad980bc52114

This is my first experience with CF and first impressions matter. Just hope this can get resolved quickly, or that it will be addressed at least.

DDiAvisoo <@1116145234007556106> Same here. 500 for random css and js files. dep id 5061f...

DiAvisoo•6/9/24, 9:55 AM

Got an update to this. My original build had ~2500 files and everything was uploaded successfully through wrangler. Several random js and css files got 500-error however when accessing them. The amount of files are due to articles on the site.
I did a test now and only prerendered part of the articles, ending up with 1050 files, and deployed that. Now everything on CF works and there are no 500-errors, but I need to be able to publish all my articles.

DDiAvisoo Got an update to this. My original build had ~2500 files and everything was uplo...

harshjv•6/9/24, 12:20 PM

Number of files shouldn't be an issue. CF Pages allows up to 20,000 files (https://developers.cloudflare.com/pages/platform/limits/#files)

harshjv•6/9/24, 12:21 PM

I had to roll back to a previous deployment since all new deployments have this issue, but i need to deploy ASAP

DDiAvisoo Got an update to this. My original build had ~2500 files and everything was uplo...

Walshy•6/9/24, 1:04 PM

very confused why this is happening... can you please share a repro URL?
Same for you @harshjv

Walshy•6/9/24, 1:05 PM

(actually moving to forum, easier to track - https://canary.discord.com/channels/595317990191398933/1249285733416439838)

TothW•6/9/24, 1:18 PM

Hello everybody I am a little bit confused. I have this WAF rule to bloc all requests from HTTP/1.0 and HTTP/1.1 but I see some events first went through bot fight mode, cloudflare gave the managed challenge and then passed my WAF even though the request came from HTTP/1.1. Is there any way to block this?

Walshy•6/9/24, 1:21 PM

That's only blocking HTTP rather than HTTPS

Walshy•6/9/24, 1:22 PM

You can use HTTPS over HTTP/1.1

Walshy•6/9/24, 1:22 PM

(HTTP just means HTTP requests over plain text while HTTPS is HTTP encrypted)

Walshy•6/9/24, 1:22 PM

There's probably a protocol version field or something you can use

Walshy•6/9/24, 1:23 PM

ah yeah:

Walshy•6/9/24, 1:23 PM

https://i.walshy.dev/hdf4oTNUBMCFhgQsUN.png

Walshy•6/9/24, 1:23 PM

"HTTP Version"

Walshy•6/9/24, 1:23 PM

do a rule like that and you can block /1.0 and /1.1

Walshy•6/9/24, 1:24 PM

(also, this is not the right channel for WAF stuff - this is for the Pages product -- general-discussions )

TothW•6/9/24, 1:36 PM

You are right, thank you. Yes, my bad, I've asked here because I am trying to set up the security for a cloudflare page MeowHeartCloudflare

. I will use the other channel.

cosetto•6/9/24, 2:37 PM

Hello everyone, I have a question to ask.
How to make r2 become a resource folder in page?
For example, my page is "example.page.dev", and I want to access the r2 files under "example.page.dev/asset"

RraRaRa I kinda wish it was just like S3 or any other origin, where it doesn't need to "...

Hello, I’m Allie!•6/10/24, 8:51 AM

IIRC the confirmation phase is just issuing the cert

Hello, I’m Allie!•6/10/24, 8:51 AM

So you can’t really skip it

bkspace•6/10/24, 10:34 AM

Any ideas on why

dev

dev

deploy

deploy

doesn't like import attributes?

Bbkspace Any ideas on why `dev` or `deploy` doesn't like import attributes?

DaniFoldi•6/10/24, 11:09 AM

probably because wrangler is still using an ancient esbuild version :/

DDaniFoldi probably because wrangler is still using an ancient esbuild version :/

bkspace•6/10/24, 11:47 AM

Thanks for pointing me in that direction - that is indeed the issue. Looks like getting on 0.19.x0.19.x+ still needs some work.

Bbkspace Thanks for pointing me in that direction - that is indeed the issue. Looks like ...

DanGamble•6/10/24, 12:03 PM

Is there any issue where this is being tracked yet?

DaniFoldi•6/10/24, 12:26 PM

There is an issue (https://github.com/cloudflare/workers-sdk/issues/5222), and there used to be an experimental PR but they closed that (https://github.com/cloudflare/workers-sdk/pull/5361)

alexandernst•6/10/24, 12:29 PM

I'm reading Pages' docs and I can't find a way to make the server return a proper 404 http code in an asset that doesn't exist is requested.

According to https://developers.cloudflare.com/pages/configuration/serving-pages/#not-found-behavior I can create a custom 404.html that can display a "404 not found" message to the user, but the actual http code is still 200.

And according to https://developers.cloudflare.com/pages/configuration/serving-pages/#single-page-application-spa-rendering if I don't provide any 404.html, cloudflare will return the index.html for all requests that don't match any file.

So... how can I make Pages return a real 404 http code?

Aalexandernst I'm reading Pages' docs and I can't find a way to make the server return a prope...

Erisa•6/10/24, 12:37 PM

the status code of /404/404 itself should be 200 since its a file that exists (this is confusing but makes sense from a technical standpoint), but having that file present will cause invalid files like /asdfg/asdfg to return 404 - is that not what you are seeing?

alexandernst•6/10/24, 12:38 PM

oh, I thought /asdf/asdf would also return 200 (because of the presence of the 404.html)

alexandernst•6/10/24, 12:38 PM

let me check

Erisa•6/10/24, 12:39 PM

It shouldnt

Erisa•6/10/24, 12:39 PM

https://erisa.uk/asdf for example

alexandernst•6/10/24, 12:45 PM

oh it does!! (I just tried with my page)

alexandernst•6/10/24, 12:45 PM

thank you

Erisa•6/10/24, 1:22 PM

What error do you get?

Hello! I had a question regarding cloudflare pages. When adding a subdomain to a cloudflare pages pr

Similar Threads

Similar Threads

Similar Threads