is it possible to spoof the ip address in cloudflare to requests sent to my own origin (change the `

is it possible to spoof the ip address in cloudflare to requests sent to my own origin (change the

cf-connecting-ip

cf-connecting-ip

to an arbitrary ip)

Ddaniel is it possible to spoof the ip address in cloudflare to requests sent to my own ...

Peps•8/11/24, 10:07 PM

No. Cloudflare will always put the ip they see in the

cf-connecting-ip

cf-connecting-ip

header.
Just make sure your origin only trusts the header's value if the request came from Cloudflare's ips

danielOP•8/11/24, 10:43 PM

thanks

pan•8/11/24, 10:46 PM

LLyfhaël Hello there, I wanted to know if when verifying a turnstile token sent by a user...

Peps•8/11/24, 10:51 PM

Assuming you know the ip of the real visitor, you can pass the remoteipremoteip parameter to the siteverify endpoint, which then has it check to see if the ip matches up

https://developers.cloudflare.com/turnstile/get-started/server-side-validation/#accepted-parameters

Cloudflare Docs

Server-side validation · Cloudflare Turnstile docs

It is critical to enforce Turnstile tokens with the siteverify API. The Turnstile token could be invalid, expired, or already redeemed. Not verifying …

lugui•8/11/24, 10:52 PM

hey, I have 2 services on the same host machine and I want to create 2 individual tunnels with cloudflared CLI for each service, each on a subdomain service1.mydomain.comservice1.mydomain.com and service2.mydomain.comservice2.mydomain.com
is it possible?

lugui•8/11/24, 10:53 PM

so far I could only see examples where there is the config.ymlconfig.yml file and it has only one tunnel

Llugui hey, I have 2 services on the same host machine and I want to create 2 individua...

Erisa•8/11/24, 10:54 PM

you dont need two tunnels, you can have the one tunnel with multiple ingress rules / public hostnames

if using the UI, simply create another public hostname pointing to the other local service
if using a local config.yml, create ingress rules as directed in the documentation

EErisa you dont need two tunnels, you can have the one tunnel with multiple ingress rul...

lugui•8/11/24, 11:03 PM

when I try to validate I get mapping values are not allowed in this contextmapping values are not allowed in this context
I have no ide aof what this means

lugui•8/11/24, 11:04 PM

nvm, copy paste issue

Erisa•8/11/24, 11:05 PM

yaml is wild, i assume you got the indention slightly wrong

lugui•8/11/24, 11:10 PM

yea, that was jsut a mistake, the yaml is fine now, but I mhaving a different error when validating

lugui•8/11/24, 11:10 PM

The last ingress rule must match all URLs (i.e. it should not have a hostname or path filter)The last ingress rule must match all URLs (i.e. it should not have a hostname or path filter)

LLyfhaël I see, and about the useragent is it possible to double check in the same way ?

Peps•8/11/24, 11:11 PM

not that I'm aware of

Llugui ``The last ingress rule must match all URLs (i.e. it should not have a hostname ...

lugui•8/11/24, 11:12 PM

lugui•8/11/24, 11:12 PM

im unsure of what the error means, this config file looks exactly like the example, but with a different domain

Llugui im unsure of what the error means, this config file looks exactly like the examp...

Peps•8/11/24, 11:15 PM

the last ingress rule should basically be something like

 - service: http_status:404

 - service: http_status:404

So basically a rule that has no hostname or path filter. In this case this would just return a 404 if it doesn't match anything

PPeps the last ingress rule should basically be something like ``` - service: http_st...

lugui•8/11/24, 11:21 PM

ohhh

lugui•8/11/24, 11:21 PM

thanks

Btc-TenW•8/12/24, 2:26 AM

Why does my account relate to other account ?

Chaika•8/12/24, 2:27 AM

Your user has been invited/accepted invites to have permissions in more then one account

Btc-TenW•8/12/24, 2:37 AM

How I delete this ?

Chaika•8/12/24, 2:39 AM

click on account -> manage account -> members and click on yourself -> "Leave", although I think there was something about people might not have enough permission to leave if given specific scopes, not sure if that ever got resolved

tong2611•8/12/24, 4:58 AM

Hi I am new on cloudflare need to asking I got purchased Pro plan

tong2611•8/12/24, 4:59 AM

Now if I no want using anymore can refund?

tong2611•8/12/24, 4:59 AM

Or switch to others domain?

Xiao Kai Xin•8/12/24, 7:35 AM

Hello guys may I know why my page is still showing HTTP ERROR 404, i uploaded my file on Workers & Pages

tong2611•8/12/24, 8:31 AM

So mean after purchase can’t do anything correct?

tong2611•8/12/24, 8:44 AM

Ok noted thanks

Sakib•8/12/24, 8:49 AM

Hi, we are a small startup and we are building a saas product on cloudflare workers. We need a feature from cloudflare saas which is only available on enterprise (custom hostname with wild card domain) right now, we are using pro plan, we will move to business plan once the product is ready. But we can't afford to move to enterprise plan yet. Is there anyway, we can use that feature on our current plan or business plan. Or is there anyway we can use enterprise plan with business plan pricing? Thanks

SSakib Hi, we are a small startup and we are building a saas product on cloudflare work...

Hard@Work•8/12/24, 8:50 AM

Which feature?

HHard@Work Which feature?

Sakib•8/12/24, 8:51 AM

https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/plans/

Wildcard custom hostnames

Cloudflare Docs

Plans — Cloudflare for SaaS · Cloudflare for Platforms docs

Learn what features and limits are part of various Cloudflare plans.

sh4rks•8/12/24, 9:11 AM

SSakib https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/p...

Hard@Work•8/12/24, 9:46 AM

You can try contacting Support, but unfortunately I am not sure they will be able to help you either...

HHard@Work You can try contacting Support, but unfortunately I am not sure they will be abl...

Erisa•8/12/24, 2:02 PM

Better to contact Sales for this, Support won't be able to do anything

EErisa Better to contact Sales for this, Support won't be able to do anything

Hard@Work•8/12/24, 2:03 PM

Oh, right, thanks for the catch!

Walshy•8/12/24, 11:03 PM

was speaking to the team about it the other day

Walshy•8/12/24, 11:03 PM

it's being worked on but no timeline

Original message was deleted

Kasumi•8/13/24, 4:47 AM

Tf is with CF wrong. A startup can't be that fast vom almost 0 to 100 in a year o.o

beingahuman857•8/13/24, 5:52 AM

any body here how can help me

beingahuman857•8/13/24, 5:52 AM

to resolve my isue

beingahuman857•8/13/24, 5:58 AM

i wana use cloudflare whois protection while my domain is not rgistrd on cloud flare domain is reisterd on godady can any body help me out to find how i can resolv the isue

yourcutebaby💕•8/13/24, 12:01 PM

Hello everyone one here how can I get a new domain.. can anyone assist me on that

Original message was deleted

Idle•8/13/24, 1:11 PM

step one is optional

is it possible to spoof the ip address in cloudflare to requests sent to my own origin (change the `

Similar Threads

Similar Threads

Similar Threads