Cloudflare Developers•2y ago

Hi everyone. Does anyone have any idea why cloudflare ignored my WAF rules? This is the request and

Hi everyone. Does anyone have any idea why cloudflare ignored my WAF rules? This is the request and these are my rules:

TothWOP•6/13/24, 8:25 AM

based on the rules shouldn't the request be blocked?

TothWOP•6/13/24, 8:25 AM

it was a request with HTTP1.0

TTothW Hi everyone. Does anyone have any idea why cloudflare ignored my WAF rules? This...

Hello, I’m Allie!•6/13/24, 8:49 AM

It's because you have Bot Fight Mode enabled. Bot Fight Mode bypasses your rules

HHello, I’m Allie!It's because you have Bot Fight Mode enabled. Bot Fight Mode bypasses your rules

TothWOP•6/13/24, 8:51 AM

yes, but based on their traffic sequence shouldn't after bot fight mode pass through WAF? At least this is what I understand from this top to down sequence

Kasumi•6/13/24, 8:59 AM

No wonder why CloudFlare Dashboard has everytime loading issues. Its made with React I guess :NayaDerp:

TTothW yes, but based on their traffic sequence shouldn't after bot fight mode pass thr...

Hello, I’m Allie!•6/13/24, 9:05 AM

Not quite. If you use SuperBotFightMode, then yes, but regular BFM overrides all your rules

Hello, I’m Allie!•6/13/24, 9:05 AM

It's generally a heavy hammer, so we recommend only using it when absolutely necessary, or otherwise upgrading to get SBFM

HHello, I’m Allie!It's generally a heavy hammer, so we recommend only using it when absolutely nec...

TothWOP•6/13/24, 9:14 AM

okay, I understand about BFM and SBFM but what do you mean by absolutely necessary? When is it necessary to activate BFM? (I am new to managing DNSes)

JellyMuffin•6/13/24, 9:14 AM

How can I configure Cloudflare to allow my IP address to bypass a 301 redirect set by Page Rules and load files directly from the hosting server?

Yesterday, I successfully configured the redirect rule setting to allow my IP address to bypass the 301 redirect. However, I had to delete all settings this morning and start fresh. I can't remember how I did it yesterday. How can I make my IP address bypass the 301 redirect instructions set under page rules?

Thanks.

TTothW okay, I understand about BFM and SBFM but what do you mean by absolutely necessa...

Hello, I’m Allie!•6/13/24, 9:16 AM

Basically, only use BFM when you are currently under attack by a lot of bots. It isn't something I would recommend having on all the time

JJellyMuffin How can I configure Cloudflare to allow my IP address to bypass a 301 redirect s...

Hello, I’m Allie!•6/13/24, 9:17 AM

Add an ANDAND condition to your rule, where if IP Source Address does not equalIP Source Address does not equal your IP

HHello, I’m Allie!Add an `AND` condition to your rule, where if `IP Source Address does not equal`...

JellyMuffin•6/13/24, 9:19 AM

So if I set a Redirect Rule with this condition, should I delete the 301 instructions under Page Rules?

HHello, I’m Allie!Basically, only use BFM when you are currently under attack by a lot of bots. It...

TothWOP•6/13/24, 9:21 AM

If I understood correctly it is better to have WAF rules to filter traffic rather than activating the bot mode

. Do you happen to have any sheet with what WAF rules I should have (except the ones I've showed in the image above)?

TothWOP•6/13/24, 9:22 AM

At least the basic ones

JJellyMuffin So if I set a Redirect Rule with this condition, should I delete the 301 instruc...

Hello, I’m Allie!•6/13/24, 9:40 AM

You can do that

TTothW If I understood correctly it is better to have WAF rules to filter traffic rathe...

Hello, I’m Allie!•6/13/24, 9:40 AM

I do not, unfortunately

HHello, I’m Allie!I do not, unfortunately

TothWOP•6/13/24, 9:41 AM

okay, thank you for the answers :MeowHeartCloudflare:

Vikash•6/13/24, 11:27 AM

Why Cloudflare is slow in India?

A simple

GET

GET

request with D1

Select * from Users Limit 10

Select * from Users Limit 10

take

1690ms

1690ms

to load.

Original message was deleted

Vikash•6/13/24, 11:34 AM

APAC region for DB. How to find what what pop i am hitting in the rays?

Vikash•6/13/24, 11:36 AM

Vikash•6/13/24, 11:36 AM

BOM - I guess Bombay, India

Kasumi•6/13/24, 11:37 AM

Bombe :BL_Boom:

Vikash•6/13/24, 11:38 AM

Got it, thanks for the knowledge sharing. Now I know it better.

HHello, I’m Allie!You can do that

JellyMuffin•6/13/24, 11:47 AM

Thank You for the insight, it worked.

Mmoorjaniharesh Hello, can anyone confirm .in TLD support in registrar?

Hello, I’m Allie!•6/13/24, 12:46 PM

It does not appear to be supported

Mmoorjaniharesh will it be ever supported? need it urgently

Hello, I’m Allie!•6/13/24, 12:50 PM

As it isn't on the Available Soon list, I wouldn't hold my breath

TothWOP•6/13/24, 12:59 PM

Does someone know if the "known bots" from WAF rules includes verified bots mentioned here https://radar.cloudflare.com/traffic/verified-bots ?

TTothW Does someone know if the "known bots" from WAF rules includes verified bots ment...

Hello, I’m Allie!•6/13/24, 12:59 PM

It should be the exact same, yeah

TothWOP•6/13/24, 12:59 PM

okay, thank you

TothWOP•6/13/24, 1:00 PM

:MeowHeartCloudflare:

emmett•6/13/24, 4:18 PM

Quick question if anyone has a moment? I'm assuming DNS records are the issue is www works but non www doesn't work for my website?

Original message was deleted

DaniFoldi•6/13/24, 5:06 PM

Thanks

PK_Sec•6/13/24, 5:59 PM

is it true that cache rule work bottom to top?

PPK_Sec is it true that cache rule work bottom to top?

Chaika•6/13/24, 7:00 PM

all in the docs: https://developers.cloudflare.com/cache/how-to/cache-rules/order/

Chaika•6/13/24, 7:00 PM

Cache Rules are stackable. This means that multiple matching rules can be combined and applied to the same request. For example, if multiple cache rules match the same URL, then the features set in those cache rules will all be applied in order. If several matching rules set a value for the same setting, the value in the last matching rule wins. For an example of a similar scenario where multiple rules match, refer to the Origin Rules FAQ.

For conflicting settings (for example, bypass cache versus eligible for cache), the last matching rule wins. For example, if cache rule #1 is set to cache everything on example.com/images and cache rule #2 is set to bypass cache on example.com, then cache will be bypassed for all URLs that match example.com, since rule #2 is the last matching rule.

Cristian Paul•6/14/24, 12:24 AM

Is it posible to use env var with addEventListener ?

Erisa•6/14/24, 12:44 AM

on that syntax it will be added as a global variable

Isaac McFadyen•6/14/24, 1:18 AM

^ this but also I'd recommend avoiding that and using Module Worker syntax instead unless you have a compelling reason not to, Server Worker syntax doesn't support a number of features.

JellyMuffin•6/14/24, 4:10 AM

Is Cloudflare's caching now a paid feature? If not, will my static 3-page website be cached automatically? (I've set the caching level to Standard, but Cache Reserve isn't enabled.) Thanks

Erisa•6/14/24, 4:12 AM

edge cache is included on all plans including free, you can even have Smart Tiered Cache for free. Cache Reserve is an additional addon product but not needed for caching

Erisa•6/14/24, 4:12 AM

if you intend to cache html or other file formats not cached by default, you need to make a Cache Rule

EErisa if you intend to cache html or other file formats not cached by default, you nee...

JellyMuffin•6/14/24, 4:13 AM

Thank you for the information.

JellyMuffin•6/14/24, 4:40 AM

In the context of my existing rule on Cloudflare/Rules/Page Rules to redirect www to non-www URL of my site:

1) Should the Cache Level rule be in position 1 or 2?
2) Is it correct to set the Cache Level rule URL to the non-www version of my website, or does it not matter if it's the non-www or the www version?
Thanks.

JJellyMuffin In the context of my existing rule on Cloudflare/Rules/Page Rules to redirect ww...

Isaac McFadyen•6/14/24, 4:56 AM

It doesn't matter.
- If you hit
```
example.com
```
```
example.com
```
  then the cache rule will be applied.
- If you hit
```
www.example.com
```
```
www.example.com
```
  then you will be redirected to
```
example.com
```
```
example.com
```
  , after which all the rules will run again and so the cache rule will be applied also.
You need to have it on the
```
example.com
```
```
example.com
```
(it's correct right now), not
```
www.example.com
```
```
www.example.com
```
, because having it on
```
www.example.com
```
```
www.example.com
```
will simply cache the redirect and not the page.

IIsaac McFadyen 1. It doesn't matter. - If you hit `example.com` then the cache rule will be a...

JellyMuffin•6/14/24, 4:57 AM

Thank you !

Isaac McFadyen•6/14/24, 4:57 AM

No problem

Hi everyone. Does anyone have any idea why cloudflare ignored my WAF rules? This is the request and

Similar Threads

Similar Threads

Similar Threads