https://developers.cloudflare.com/workers/wrangler/environments/ Can booth the dev and production w

https://developers.cloudflare.com/workers/wrangler/environments/

Can booth the dev and production worker have the same name and live undertneath one service in cloudflare, but use different routes that is defined underneath the worker

Cloudflare Docs

Environments | Cloudflare Workers docs

Deploy the same Worker application with different configuration for each environment.

AAbakir https://developers.cloudflare.com/workers/wrangler/environments/ Can booth the ...

Ashley•9/4/24, 4:17 PM

It's in the docs you linked:

Wrangler appends the environment name to the top-level name to deploy a Worker. For example, a Worker project named my-worker with an environment [env.dev] would deploy a Worker named my-worker-dev.

Wrangler appends the environment name to the top-level name to deploy a Worker. For example, a Worker project named my-worker with an environment [env.dev] would deploy a Worker named my-worker-dev.

So no, they cannot have the same name - you can map multiple routes to a single environment, but you can't have dev/production with the same name but different bindings etc.

AbakirOP•9/4/24, 4:18 PM

Yea that makes sense I was just making sure

Nnil this would be as part of an API call, so i would ideally like just have one fetc...

Ashley•9/4/24, 7:34 PM

Have you tried using a Durable Object instead of a queue? See: https://developers.cloudflare.com/browser-rendering/get-started/browser-rendering-with-do/ it should allow you to achieve the same outcome but a DO is more suited to a synchronous workflow

Cloudflare Docs

Deploy a Browser Rendering Worker with Durable Objects | Browser Re...

By following this guide, you will create a Worker that uses the Browser Rendering API along with Durable Objects to take screenshots from web pages and store them in R2.

lifeiscontent•9/5/24, 2:10 AM

for load context, is that something you should stuff things like auth, db, session management tools into?

HHard@Work Workers(Unbound isn't really a thing anymore), while not a dedicated "heavy-comp...

sakura•9/5/24, 4:23 AM

Is this per HTTP request or 30s across all HTTP requests?

Ssakura Is this per HTTP request or 30s across all HTTP requests?

Ashley•9/5/24, 8:33 AM

Per HTTP request (https://developers.cloudflare.com/workers/platform/limits/#worker-limits for full details) and everyone is on the Standard pricing model now

Cloudflare Docs

Limits | Cloudflare Workers docs

Cloudflare Workers plan and platform limits.

majestic•9/5/24, 9:08 AM

Can enterprise users have static ip ?

Ssakura Is this per HTTP request or 30s across all HTTP requests?

Hard@Work•9/5/24, 9:27 AM

Per request

Mmajestic Can enterprise users have static ip ?

Walshy•9/5/24, 9:36 AM

https://developers.cloudflare.com/aegis/

Cloudflare Docs

Overview | Cloudflare Aegis docs

Cloudflare Aegis provides dedicated egress IPs (from Cloudflare to your origin) for your layer 7 WAF and CDN services. The egress IPs are reserved exclusively for your account so that you can increase your origin security by only allowing traffic from a small list of IP addresses.

mo246•9/5/24, 11:04 AM

Hi guys I’m new here, I’m a total noob so excuse any wrong terms I may use. I made a chrome extension that uses AI (Anthropic API) to generate replies to reviews. So in order to protect my api key from client side code I wanted to use workers as a “middle man”. My front end would call the worker then the worker would call Anthropic and then send back the response to my front end. However I have two security issues:

Can anyone not just get the worker url from my code (chrome extension code can be downloaded) and make their own requests to the worker?
Is there a way to limit requests to the worker? Again, can someone not access the url and maliciously make like a million calls to the end point?

It’s based on usage so I’m afraid of racking up a high bill. I currently used netlify functions but after reading stories on them I want to move away. I thought AI Gateway was the savior but turns out it just for analytical purposes? As you have to add your API key

Ashley•9/5/24, 11:58 AM

FWIW this would also be a problem if you used any other means to expose your backend (e.g. a VPS). You can try to limit the potential abuse further by requiring users to login via Google or something - and then only allowing authenticated users to hit the endpoint (validate they have a JWT or w/e you want to do). Of course people can sign in and then send millions of requests if they want to, but it makes it a bit more difficult/effort and that's generally what a lot of security is about.

I'd also recommending setting a spending limit in your Anthropic account, not sure what controls they give you, but most offer spending caps - so at least if you do get hit, it will be limited, and you can start out with a low spend if you're expecting slow and gradual uptake.

mo246•9/5/24, 1:48 PM

Thanks yea that’s what I was recommended, setting up proper auth. The issue isn’t with over spending on Anthropic but the worker/function. Anthropic is prepaid so if I put $10 it only uses that much and no more unless I have auto recharge on which I won’t. I’m not concerned about users abusing it but someone who can download the source code files and see the url in the code that I use to generate replies. It just seem to be a bigger problem than just putting the api key in code. Someone can use my api key but I have a limit on it.

Avi•9/5/24, 2:21 PM

Avi•9/5/24, 2:21 PM

is this a cloudflare error? never seen it before

Avi•9/5/24, 2:21 PM

we’re using DurableObjects

AAvi Click to see attachment

Hard@Work•9/5/24, 2:22 PM

That sounds like a JS error when you call too many setTimeout()setTimeout() without them resolving

HHard@Work That sounds like a JS error when you call too many `setTimeout()` without them r...

Avi•9/5/24, 2:23 PM

hmm yeah that was my thought too…. are we expected to be manually calling clearTimeout?

johtso•9/5/24, 2:23 PM

how do you specify what account to deploy to when you have multiple accounts authenticated?

johtso•9/5/24, 2:26 PM

can I put an account id in a default config in the top level of my monorepo?

AAvi hmm yeah that was my thought too…. are we expected to be manually calling clearT...

Hard@Work•9/5/24, 2:27 PM

If you are generating a lot of them, then don't need them all, I would do so, yeah

Jjohtso can I put an account id in a default config in the top level of my monorepo?

Hard@Work•9/5/24, 2:27 PM

No, but you can put the account ID in your

wrangler

wrangler

config

HHard@Work If you are generating a lot of them, then don't need them all, I would do so, ye...

Avi•9/5/24, 2:28 PM

we probably shouldn’t be generating too many… 10K simultaneous sounds like a bug of some kind for sure. we probably only spin up several hundred DOs in a 10 minute period

HHard@Work No, but you can put the account ID in your `wrangler` config

johtso•9/5/24, 2:40 PM

that's not ideal as it's my work account and I don't want it to affect my personal account

johtso•9/5/24, 2:41 PM

so I really want it to be global but just for the project/directory/monorepo

Jjohtso that's not ideal as it's my work account and I don't want it to affect my person...

Hard@Work•9/5/24, 2:45 PM

Not sure I understand? If you put the ID in your config, then it only applies to that one Worker/Pages Project

HHard@Work Not sure I understand? If you put the ID in your config, then it only applies to...

johtso•9/5/24, 2:52 PM

oh, I think I misunderstood what you meant by "your" config.. do you just mean the project config? there are many workers in my monorepo, wanted to avoid hardcoding the account id into all of them

Jjohtso oh, I think I misunderstood what you meant by "your" config.. do you just mean t...

Hard@Work•9/5/24, 2:52 PM

Yeah, that's what I meant. There isn't currently a way to make them inherit an account ID from somewhere else

Hard@Work•9/5/24, 2:53 PM

Unless you want to add an Environment Variable that you can somehow scope to just that directory

johtso•9/5/24, 2:55 PM

ohh, that could work

lifeiscontent•9/5/24, 6:13 PM

why is pages recommend over worker sites? It seems like Worker Sites is more powerful

Llifeiscontent why is pages recommend over worker sites? It seems like Worker Sites is more pow...

Chaika•9/5/24, 6:23 PM

In what way? Pages has built in CI/CD, supports advanced mode so you can pop out of the provided stuff and use it more like Worker Sites, free unlimited static asset requests, versioning/rollbacks/etc

CChaika In what way? Pages has built in CI/CD, supports advanced mode so you can pop out...

lifeiscontent•9/5/24, 6:24 PM

can't seem to use durable objects / D1 Transactions but maybe I'm doing something wrong?

Devon•9/5/24, 6:25 PM

Yeah, the functionality venn diagram of Workers/Workers Sites and Pages/Pages Functions is... a bit awkward imho.

Llifeiscontent can't seem to use durable objects / D1 Transactions but maybe I'm doing somethin...

Chaika•9/5/24, 6:25 PM

Durable Objects have to be defined in a worker and then you can attach to in Pages, Explicit Transactions don't exist outside of batch

DDevon Yeah, the functionality venn diagram of Workers/Workers Sites and Pages/Pages F...

Chaika•9/5/24, 6:25 PM

They're working on converging Pages and Workers into one product: https://blog.cloudflare.com/pages-and-workers-are-converging-into-one-experience/

The Cloudflare Blog

Bringing a unified developer experience to Cloudflare Workers and P...

Today we’re excited to announce that over the next year we will be working to bring together the best traits and attributes you know and love from each product into one powerful platform!

CChaika They're working on converging Pages and Workers into one product: https://blog.c...

Devon•9/5/24, 6:25 PM

Yeah, I'm very much looking forwards to that!

Chaika•9/5/24, 6:26 PM

it's a little awkward right now, Pages still has a ton more stuff then normal Workers, would hardly say Worker Sites is more powerful outside of a few edge-case not supported stuff/bindings

lifeiscontent•9/5/24, 6:26 PM

@Chaika I thought you could provide a transactions.js file? https://blog.cloudflare.com/whats-new-with-d1/

The Cloudflare Blog

D1: our quest to simplify databases

Get an inside look on the D1 experience today, what the team is currently working on and what’s coming up!

Chaika•9/5/24, 6:27 PM

"Sneak peek"

Devon•9/5/24, 6:27 PM

For now I'm mostly doing my FE in Pages and my services as Workers, and just using lerna monorepo (sometimes combined with git submodules) to manage the whole thing.

lifeiscontent•9/5/24, 6:29 PM

@Chaika hmm, so if I wanted to build a social network on cloudflare, would that be something that would not make sense to do given the current scope of features that exist?

Chaika•9/5/24, 6:29 PM

It has implicit transactions with batch/queries

Chaika•9/5/24, 6:30 PM

https://developers.cloudflare.com/d1/build-with-d1/d1-client-api/#batch-statements

Cloudflare Docs

Query D1 | Cloudflare D1 docs

D1 is compatible with most SQLite’s SQL convention since it leverages SQLite’s query engine. D1 client API allows you to interact with a D1 database from within a Worker.

lifeiscontent•9/5/24, 6:30 PM

Decision fatigue is getting the best of me with all of this new tooling

Chaika•9/5/24, 6:31 PM

It depends exactly how you want to build it how you'd go about it, but I don't see any reason why it would be impossible, D1 is semi-limited though because right now it's a single javascript thread/isolate in a single location, so for dynamic social networks which aren't too cachable you might reach the limits of one + the max size of 10gb per db

Chaika•9/5/24, 6:32 PM

they want you to scale with more DBs but doing that with a social network would be interesting, I guess could have each user in its own D1 DB but would need a lot of glue + the tooling to handle that all well/dynamically is still unreleased

lifeiscontent•9/5/24, 6:34 PM

so maybe something like: https://sqlitecloud.io

SQLite Cloud - Share, scale and deploy SQLite databases.

SQLite Cloud offers an easy way to share single-user SQLite databases to the cloud. We offer enterprise features like advanced scaling solutions, continuous backup, ACID-compliant over multiple nodes (and multiple zones), pub/sub capabilities, powerful users/roles access control, and a javascript-based programming language to extend the built-in...

Chaika•9/5/24, 6:35 PM

you mean instead of d1? That's basically what D1 aims to provide eventually in some ways, although I would note their storage limits are no better/probably same other arch limits to a degree if that's why you don't want to use d1

https://developers.cloudflare.com/workers/wrangler/environments/ Can booth the dev and production w

Similar Threads