I have about 56k unique visitors on my site all running under the free plan. I found that our attack

I have about 56k unique visitors on my site all running under the free plan. I found that our attack protection was quite annoying. Its currently set to "under attack", what should I change this to? Is there a "goto" mode

DawsonOP•8/6/24, 5:30 PM

Theres not much danger in what a ddos attack could do to us anyways

DDawson I have about 56k unique visitors on my site all running under the free plan. I f...

Hello, I’m Allie!•8/6/24, 6:03 PM

Under Attack Mode is a single toggle, it’s either on or off

DawsonOP•8/6/24, 6:04 PM

What mode should I turn it to? Low?

DawsonOP•8/6/24, 6:04 PM

Just curious about if theres a general recommendation

Chaika•8/6/24, 6:04 PM

well it's part of Security Level, which is all just IP Reputation based challenging

Chaika•8/6/24, 6:05 PM

The default is medium. imo I just use essentially off because ip reputation is a bit silly and espec in this case your origin is Pages so not too much worrying about ddos attacks

DawsonOP•8/6/24, 6:05 PM

Alright thank you

Chaika•8/6/24, 6:06 PM

static assets are free/unlimited requests, only have to worry about functions if you have any of those but again ip reputation is a meh way of countering those anyway, there's rate limiting included with free you can configure on your website

jasdf•8/7/24, 7:23 AM

I am assuming Cloudflare Pages uses R2 for storing the origin content internally. What data locations are used to store origin content for pages?

jasdf•8/7/24, 7:23 AM

By data regions, I mean like the ones used for R2
wnam Western North America
enam Eastern North America
weur Western Europe
eeur Eastern Europe
apac Asia-Pacific

Jjasdf I am assuming Cloudflare Pages uses R2 for storing the origin content internally...

Erisa•8/7/24, 7:33 AM

Pages uses KV to store data, not R2

Erisa•8/7/24, 7:34 AM

KV stores in both US and Europe but caches globally, with an explanation here https://developers.cloudflare.com/kv/concepts/how-kv-works/

jasdf•8/7/24, 7:52 AM

Curious how a 25 MiB file is stored on KV

jasdf•8/7/24, 7:56 AM

wow, just found out KV can have values as large as 25MiB https://developers.cloudflare.com/kv/platform/limits/

Cloudflare Docs

Limits · Cloudflare Workers KV

To request an increase to a limit, complete the Limit Increase Request Form . If the limit can be increased, Cloudflare will contact you with next …

jasdf•8/7/24, 7:58 AM

what would be faster for hosting a static site, pages or R2?

Erisa•8/7/24, 8:01 AM

If you put cache in front of R2 then cache hits would be the same but cache misses would be faster on Pages/KV since it has two origins

Erisa•8/7/24, 8:02 AM

if you be fancy and have multiple R2 buckets with a worker to route between them, itll be about the same

Hard@Work•8/7/24, 8:02 AM

Though Pages still wins on being entirely free for static asset requests

Erisa•8/7/24, 8:02 AM

important thing to keep in mind though is that Pages static assets are free :)

EErisa important thing to keep in mind though is that Pages static assets are free :)

Hard@Work•8/7/24, 8:02 AM

Jinx!

EErisa If you put cache in front of R2 then cache hits would be the same but cache miss...

jasdf•8/7/24, 8:06 AM

assuming 95% of my traffic is from North America, I do not care much about the second EU origin for Pages.

Erisa•8/7/24, 8:09 AM

Great, an R2 bucket in NA should serve you well then

Erisa•8/7/24, 8:10 AM

you'd still want cache in front if possible to reduce your own costs (cache is free, R2 is not) and to reduce latency for those in other parts of NA (since its relatively wide)

jasdf•8/7/24, 8:11 AM

relatively wide?

jasdf•8/7/24, 8:11 AM

even with R2, I have to chose between wnam and enam

jasdf•8/7/24, 8:12 AM

again its a single origin

jasdf•8/7/24, 8:12 AM

yes, cache is free, R2 storage is not, but R2 egress is free too.

Walshy•8/7/24, 8:12 AM

to be very clear, with caching in front of r2 or using pages, you should basically never hit the "origin" unless you have barely any traffic

Walshy•8/7/24, 8:13 AM

pages cache hit rate is like 99.99%

jasdf•8/7/24, 8:13 AM

even on the free plan?

jasdf•8/7/24, 8:13 AM

wow

Walshy•8/7/24, 8:13 AM

yeah

Jjasdf yes, cache is free, R2 storage is not, but R2 egress is free too.

Erisa•8/7/24, 8:23 AM

R2 egress is free but you still pay per request

Erisa•8/7/24, 8:23 AM

unless you put cache in front

jasdf•8/7/24, 8:24 AM

correct

jasdf•8/7/24, 8:25 AM

so you are saying for static sites, I would see no major performance gain in using R2 instead of Pages.

jasdf•8/7/24, 8:25 AM

only will incur extra costs for using R2

Erisa•8/7/24, 8:29 AM

For your usecase, yeah

Erisa•8/7/24, 8:29 AM

thats accurate

leonardorusso.•8/7/24, 11:11 AM

Hey guys.. I've deployed a Flet app and set env. variables in Cloudfare dashboard. However they don't seem to be accessible in runtime. Do I need to do anything special to get them? Just using the following

load_dotenv()

Supabase URL and API key from environment variables

url = os.environ.get('SUPABASE_URL')
key = os.environ.get('SUPABASE_KEY')

Lleonardorusso.Hey guys.. I've deployed a Flet app and set env. variables in Cloudfare dashboar...

Isaac McFadyen•8/7/24, 3:08 PM

Do you mean at build-time? Python doesn't run on Pages at all in runtime, just at build-time.

Jordan•8/7/24, 5:40 PM

Hey, not sure if anyone is able to give any help, but I don't seem to be the only person with an issue trying to deploy a site on pages. I'm new to pages and trying to deploy my first site using pages, would really appreciate any help:
pages-helpRemix and Vite - 2 error(s) and 0 warning(s) when compiling Worker.

Lemon•8/8/24, 12:43 PM

Hey guys,
I'm working on an Astro project and deploying it to CF Pages
The problem i ran into is the following the secrets are read from .env whenever i push i have to change them so the prod variables will be deployed (i deploy it manually for now for testing) and the weird thing is the variables from the CF dashboard are not read why tf is this happens?
Should i just remove the .env when deploying so the CF Dashboard vars will be loaded?

Luca•8/8/24, 12:51 PM

Hello everyone, I'd like to ask you a question or two about Cloudflare Pages, WAF, domains and limits.
The main idea of the project is to create a react app and host it with Cloudflare Pages, with a form that interacts with a Google Cloud Function (or a Cloudflare function), sending and reading data.
I'll try to be as concise as possible with my questions:
1 - I see that the Cloudflare 100 pages limits is just a soft limit that is in place to prevent abuse and if the activity is legitimate, it can be raised. The real question here is if the other limits on the page are soft limits too, or hard limits. I'm concerned about concurrent builds and number of custom domains. The idea is to manage hundreds, if not thousands of pages via Cloudflare Pages. I could need a periodically increasing number of total builds, concurrent builds and custom domains. Can these limits be changed? For example, 20 concurrent builds might not be enough. I might need 200 concurrent builds. Is there any kind of enterprise plan that an user or organization can leverage to bring this value up? Same for total builds and for custom domains.

1.1 - What happens when I reach the concurrent builds limit? Do build go into a queue?

2 - I would like to keep user registration out of the form functionalities, but I need to ensure that this forms do not get spammed. I have read about Cloudflare Turnstile and I think it might be a good solution. Plus, I'm implementing some logic to avoid user spams. But, I've read that WAF can be configured for different pages and rate limit traffic on a certain page.
My question here is if it's possible to configure a new rule for the WAF so that, let's say, a user spams a form for X amount of times in a short period of time, I disable the form page in the website. Or I just disable the form page to that specific user.

3 - Can I combine something like Google Cloud DNS with a custom domain of my own to register custom Cloudflare subdomains under my organization domain?

Luca•8/8/24, 12:51 PM

Thanks and sorry for the Wall of Text but I've tried contacting the Cloudflare support without any luck since yesterday

Luca•8/8/24, 1:11 PM

Oh ok thanks Leo!
So, can I configure subdomains directly into cloudflare with my own domain bought from GoDaddy?
For what concerns the Enterprise plan, is there any kind of resource I can check out about how Enterprise plan work, if they can match the demand, an idea of the costs, etc. etc.? Because I haven't found anything about this.
One last question (maybe). I read a very interesting statement in all plans for Pages: Unlimited bandwidth.
Does this mean that basically every user can reach out one of my cloudflare page, ask for the content (images, videos, text, whatever), use the forms as many times as he wants, and I won't be charged for anything at all? All this without slowing down in any way the traffic towards other pages projects that I have up and running?
This is too good to be true ahahah

Luca•8/8/24, 1:15 PM

Ah sorry, but I stated the second question about the WAF incorrectly. Considering that I can block the content of a website to a user if he reaches some sort of limit, can I do this for all my cloudflare pages?
Any additional costs?
I guess I'll have to configure a rule for every subdomain, or can I apply the rule to any subdomain?

Luca•8/8/24, 1:23 PM

Your help is very appreciated, Leo. Thanks!

Fierylion•8/8/24, 4:11 PM

CF Pages is free and I read that they have no bandwidth limit. However, I have a 400MB worth of content on my CF page, and the expected usage once I release this is at least 15 thousand views for the first few days (assuming on average each user will pull 50-200MB)

Will this bring the CF page down?

FFierylion CF Pages is free and I read that they have no bandwidth limit. However, I have a...

Chaika•8/8/24, 4:15 PM

Depends what that bandwidth is used by. Pages isn't meant to be a file locker, not meant to be used for just serving large files/videos for download and such

I have about 56k unique visitors on my site all running under the free plan. I found that our attack

Supabase URL and API key from environment variables

Similar Threads

Similar Threads

Supabase URL and API key from environment variables

Similar Threads