H!
DI prefer not putting it here publicly. Do I can send it to you through DM?
HA few thousand at least, iirc
HHeavily depends on what you need
Creally depends what you ask for and no one is going to be able to give you real examples because actual contracts are unable to disclose their pricing
Cfew thousand/month min
DHey all, been reading through the docs regarding the Bot Fight Mode. It's currently blocking all my Mailgun email webhooks. I submitted the details as a 'verified bot' but for some reason I don't see any action being taken on that any time soon, pretty sure it's just feedback that's gone into a huge backlog....
I'm currently on the free plan, and the docs say you 'get more control' over the bot fight mode.
-- I just want to confirm, if anybody knows or has experience, will this actually allow me to skip the bot fight mode against the variables I input?
I already set up a WAF rule AND a Configuration Rule to attempt to skip it. But yea.. the docs DO say that you can't modify, just turn it off... Turning it off entirely is just not an option, but I'm missing out on crucial data that I need to react to.. but hesitant to upgrade right now just in case it doesn't allow me to simply just skip the 'Managed Challenge' (not even a block, but the traffic still doesn't reach origin).
I'm currently on the free plan, and the docs say you 'get more control' over the bot fight mode.
-- I just want to confirm, if anybody knows or has experience, will this actually allow me to skip the bot fight mode against the variables I input?
I already set up a WAF rule AND a Configuration Rule to attempt to skip it. But yea.. the docs DO say that you can't modify, just turn it off... Turning it off entirely is just not an option, but I'm missing out on crucial data that I need to react to.. but hesitant to upgrade right now just in case it doesn't allow me to simply just skip the 'Managed Challenge' (not even a block, but the traffic still doesn't reach origin).
DIs the Pro plan capable of skipping bot fight mode for specific vars, or is it only Business plan and above??
DAwesome
DJust went to pro, instantly started coming through...
DThanks forthe tip
DJust wondering, would it be a better idea to place the rule to skip the bot detection in the 'Custom Rules' section, or 'Add exception' in the 'Managed Rules' section??
DCool, I'll leave it as a custom rule. I searched through all the managed rules for bot fight and came up with nothing, so assumed that was the case
DShows a nice amount of protection of loads of potential vulnerabilites thought, so that's cool to seee
DYup, went through and enabled them, gonna dive in to customise later on, quite a lot to go through 
DThanks very much btw
HHello all, I am having an issue getting a cloudflare tunnel working for my Proxmox management console.
I have cloudflared running on a raspberry pi on my network and I just did a fresh install of proxmox on a mac pro.
I am able to hit the management console with the socket: 10.10.10.202:8006 in a browser, and my raspberry pi is able to ping that host.
Tunnel is setup to route pve.n3rd-lab.net to 10.10.10.202:8006 over HTTPS. I have disabled TLS Verification but am getting a 502. Let me know if this is not the place to ask about this. Thanks!
I have cloudflared running on a raspberry pi on my network and I just did a fresh install of proxmox on a mac pro.
I am able to hit the management console with the socket: 10.10.10.202:8006 in a browser, and my raspberry pi is able to ping that host.
Tunnel is setup to route pve.n3rd-lab.net to 10.10.10.202:8006 over HTTPS. I have disabled TLS Verification but am getting a 502. Let me know if this is not the place to ask about this. Thanks!
DI was having some trouble with the cloudflared tunnels the other day, I had to fiddle with the Virtual Network settings from Settings > Warp Client > 'Manage' button at the bottom of the page, to set up a virtual network
DWell I set up a few because I'm using the same Private network CIDR for each of the tunnels, just under a different Virtual Network
DYou might have to play around with your Private Network settings
DFrom Networks > Tunnels > Find your tunnel and click the 3 dots at the end > Configure > 'Private Network' tab
DIs your CIDR(s) you've set there correct? With the correct Virtual Network selected?
DAnd just triple check that cloudflared is running and the service is installed properly with the token given in the dashboard (if you're configuring remotely that is)
DI was having issues getting things to work because I was attempting to use Warp client as well, but pure cloudflared was so much simpler, and actually worked after I disabled everything Warp related
HToken does look good and cloudflared is definitely running.
I just added a private network. I didn't have one previously.
Have not messed with WARP at all. I previously tested tunneling w/ my OPNsense management page without issue so I didn't want to deal with anything else.
There is a warning on the tunnels page I missed that there are DNS update issues rn which is probably the culprit
I just added a private network. I didn't have one previously.
Have not messed with WARP at all. I previously tested tunneling w/ my OPNsense management page without issue so I didn't want to deal with anything else.
There is a warning on the tunnels page I missed that there are DNS update issues rn which is probably the culprit
HI will give the cloudflare team a while to figure their stuff out. If I'm still having issues after the status page gives me the OK, I will reach back out.
Thanks Druppy for the quick response!
Thanks Druppy for the quick response!
DAhh that could explain it
DNo problem, I just got some quick help too, happy to pass it on. Wish you luck!
DAnd yea, for me my Warp client seemed to be caught in an endless loop, spamming the server with thousands of failed requests... couldn't figure it out
DAnd trying to figure out the split tunnels and figuring out if I needed to include/exclude something was a pain. Cloudflared all the way
DI've got a meshnet set up with my work machine, and my mobile. So now can ssh into my macbooks terminal (or even vnc if I'm feeling exotic) and from there hope straight through another ssh shell proxied through cloudflared into the origin server
DLoving it
DHope you get your network set up properly, feels good when it just works
HTrue! I'm just messing with stuff rn. OPNsense is setup as a wireguard and adguard server and I have the raspberry pi for my cloudflared tunnel. I got PVE up so I could get some services running, still need to get my NAS back online and my other PVE node. It's been a minute since I missed with any of this, but I'm moving and going from DSL to fiber so I'd like to get some stuff up and running
DDamn, I like this channel already 
love hearing about other people's setups. Just checked out OPNsense, looks pretty cool
love hearing about other people's setups. Just checked out OPNsense, looks pretty coolDThat sounds like fun tbh. Hope you get it sorted. Another fan of wireguard I see
DWas your tunnel on port 8006 where opnsense is listening ?
HOPNsense listens on 80, I actually just removed the port entirely and it figured itself out
DHope there's no clashes with the wireguard setup and cloudflared, if the wireguard doesn't terminate before trying to route through cloudflared I'd imagine there'd be issues, I didn't think it was possible to chain wireguard-> wireguard
DWhich cloudflared basically is
DAhh nice one
DMakes sense, it must have just got you into the internal network
HYeah exactly! The wireguard server is just for my uses: to hit the internal fiber network. I'll be managing most of this homelab from my current (dsl) place, so I needed a way to get ssh connections to everything in the fiber network from my dsl network.
Cloudflared will handle access to things like my plex and minecraft servers
Cloudflared will handle access to things like my plex and minecraft servers
DHaha, nice setup dude
DVery similar to what I've just done too
DI love those internal tunnels
HYeah super nice that I can get in without any portforwarding
DNice, I wasn't so lucky, my current router doesn't support full cone NATs so I had to bind my IP/MAC from the dhcp server so I could reliably set up port forwarding for my meshnet
DTime for a new router...
