Cloudflare Developers•15mo ago

can anyone please advice related to custom domains. I'm trying to create a sass king of app. 1. I

can anyone please advice related to custom domains. I'm trying to create a sass king of app.

I managed to create tenant wildcard subdomains by using pages and a custom proxy worker.

eg. https://ionica.app.greatoutdoors.live/

I added the custom domain on my side
tenant added CNAME servicii.cmnstmntm.com -> ionica.app.greatoutdoors.live

however, the request to https://servicii.cmnstmntmn.com/ is timing out. this is the traceroute

ConstantinOP•10/15/24, 2:57 PM

is this even possible with my plan? i assumed it is since i could add the custom domain

CConstantin can anyone please advice related to custom domains. I'm trying to create a sass ...

Chaika•10/15/24, 3:02 PM

Do you have a wildcard catch-all route? https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/start/advanced-settings/worker-as-origin/.
Unproxied CF For SaaS hostnames come through as the actual hostname, ex it's looking for a worker route matching servicii.cmnstmntmn.comservicii.cmnstmntmn.com and Worker Custom Domains just won't work
Be careful not to break your existing subdomains/domain with that. I usually recommend people get a separate domain just for customer custom domains to avoid issues with that and the fact that all custom hostnames inherit your zone's configuration (waf rules, config rules, network settings, etc), so better to eliminate the possibility of non-intentionally changing settings for them/more flexibility with your custom domains

Cloudflare Docs

Workers as your fallback origin | Cloudflare for Platforms docs

Learn how to use a Worker as the fallback origin for your SaaS zone.

ConstantinOP•10/15/24, 3:08 PM

yes, the worker has a pattern like this

ConstantinOP•10/15/24, 3:14 PM

so i need a worker that handles the origin specifically

ConstantinOP•10/15/24, 3:15 PM

thanks @Chaika i'll give it a try

CConstantin yes, the worker has a pattern like this

Chaika•10/15/24, 3:24 PM

no that's not a wildcard catch-all (well, not as wide as CF For SaaS needs)

Chaika•10/15/24, 3:24 PM

*/*

*/*

is a wildcard catch-all

Chaika•10/15/24, 3:24 PM

sounds like you might have figured out the rest but yea, you need an actual full wildcard

Alexander Hupfer•10/15/24, 3:48 PM

Hi, I have a worker that somehow can't connect to a D1 datbase using Prisma, but it works locally. What would be you recommendation on debugging this? I just see "Internal Server Error"

Ricky U•10/15/24, 5:01 PM

Does Workers now support native Mongodb driver?
https://blog.cloudflare.com/more-npm-packages-on-cloudflare-workers-combining-polyfills-and-native-code/

ConstantinOP•10/15/24, 5:21 PM

@Chaika you're a genius! thank you

timousy•10/15/24, 6:05 PM

Hello everyone
I have a static maintenance mode html page that is stored in Worker KV, which is only displayed to users whose ip address is not in the whitelist. I'm trying to replace some text in my html file stored in Worker KV with Worker
Here is a part from my html file

<section>
<h2>Your IP Address: <span id="user-ip">Loading...</span></h2>
</section>

I want to replace the word “Loading...” with the ip address of my user

timousy•10/15/24, 6:05 PM

Here's a script example from my Worker where I'm trying to replace

async function handleFetch(event) {
let ip = event.request.headers.get('cf-connecting-ip');
let customersIPsRangesJson = await $(cloudflare_kv_name).get('$(employee_ip_range_key)', 'json') || [];

const isIPInRange = customersIPsRangesJson.some(range => {
return range && range.includes('-') && checkIPInRange(ip, range);
});

if (isIPInRange) {
return fetch(event.request);
} else {
return handleEvent(event, ip);
}
}

class TextRewriter {
constructor(newText) {
this.newText = newText;
}

element(element) {
const newContent = <span id="user-ip">${this.newText}</span>;
element.replace(newContent, { html: true });
}
}

async function handleEvent(event, ip) {
try {
if (DEBUG) {
// customize caching
options.cacheControl = {
bypassCache: true,
};
}

const page = await getAssetFromKV(event, options);
const response = new Response(page.body, page);

// allow headers to be altered
response.headers.set("X-XSS-Protection", "1; mode=block");
response.headers.set("X-Content-Type-Options", "nosniff");
response.headers.set("X-Frame-Options", "DENY");
response.headers.set("Referrer-Policy", "unsafe-url");
response.headers.set("Feature-Policy", "none");

// Using HTMLRewriter to insert the IP address
const rewriter = new HTMLRewriter()
.on('span#user-ip', new TextRewriter(ip));

return rewriter.transform(response);
}

timousy•10/15/24, 6:05 PM

As you can see, I'm trying to get the ip from the > async function handleFetch(event) using the command let ip = event.request.headers.get('cf-connecting-ip');

Unfortunately, I cannot replace the word “Loading...” with the ip address, maybe you can help me with this, I will be very grateful

PS. I apologize in advance for any discrepancies in my explanations, I'm actually still quite new to Cloudflare Workers, and JS in general)

ConstantinOP•10/15/24, 6:09 PM

@Chaika but now if i try to redirect to a different worker address, is giving the same timeout

CConstantin @Chaika but now if i try to redirect to a different worker address, is giving th...

Chaika•10/15/24, 6:11 PM

Workers can't fetch Workers on the same zone/domain

Chaika•10/15/24, 6:11 PM

Use Service Bindings

Chaika•10/15/24, 6:11 PM

https://developers.cloudflare.com/workers/runtime-apis/bindings/service-bindings/ faster & cheaper too, not paying for requests

Cloudflare Docs

Service bindings | Cloudflare Workers docs

Facilitate Worker-to-Worker communication.

Chaika•10/15/24, 6:12 PM

They're pushing RPC which is cool but would maybe require code changes, you can just use normal http/fetch: https://developers.cloudflare.com/workers/runtime-apis/bindings/service-bindings/http/ too

Cloudflare Docs

HTTP | Cloudflare Workers docs

Facilitate Worker-to-Worker communication by forwarding Request objects.

ConstantinOP•10/15/24, 6:19 PM

wow, how cool is that

GuillaumeLakano•10/15/24, 7:27 PM

Hi! There is limit of maximum static assets files inside the new product « Workers with assets » ?
Pages have a hardware limit of 20,000 files maximum

GGuillaumeLakano Hi! There is limit of maximum static assets files inside the new product « Worke...

Chaika•10/15/24, 7:33 PM

Same as Pages workers-and-pages-discussions

ConstantinOP•10/15/24, 8:06 PM

@Chaika it looks that at some point (in the proxy worker) i have to fetch the Astro page ..

ConstantinOP•10/15/24, 8:08 PM

or a better solution would be to get rid of pages, and use astro as a worker .. but this comes with it's own limitations

ConstantinOP•10/15/24, 8:10 PM

I didn't think that implementing custom domains could be so difficult

ConstantinOP•10/15/24, 8:11 PM

Mozzy•10/15/24, 8:15 PM

Has anyone tried a canvas package on the latest Workers compatibility? node-canvas, napi-rs/canvas, etc. I assume it doesn't work

On a relevant note, is there any reality in which one of those packages would/could ever work directly on Workers without needing any external service or browsing?

Original message was deleted

Hello, I’m Allie!•10/15/24, 9:44 PM

Sort of? At the moment, if a route has an asset that matches the path exactly, then that asset will be served. One way to get around this is to put the assets in a different directory(

/cdn-cgi/assets/index.html

/cdn-cgi/assets/index.html

maybe)

WWalshy You can set a lower timeout with AbortSignal - <https://developer.mozilla.org/en...

Codex•10/15/24, 9:53 PM

This was a legendary callout, thank you for this, I completely forgot signals were a thing

Felix Chen•10/15/24, 10:26 PM

Hi guys I just wrote a simple worker to use workers ai with ollama-style API

Felix Chen•10/15/24, 10:26 PM

And I wonder if there is a way to add rate limiter without durable objects or kv storage

Felix Chen•10/15/24, 10:26 PM

As there is no authentication in ollama API

Felix Chen•10/15/24, 10:26 PM

https://github.com/ailelix/cf-workers-ai-ollama-api

GitHub

GitHub - ailelix/cf-workers-ai-ollama-api: Use Cloudflare Workers A...

Use Cloudflare Workers AI with Ollama-Style API. Contribute to ailelix/cf-workers-ai-ollama-api development by creating an account on GitHub.

Akash•10/16/24, 5:58 AM

Is there any plan to support permissions for service bindings? I would like to have two workers where one is having write permission on a kv namespace but other is having only read permission.

Alexander Hupfer•10/16/24, 7:18 AM

what's going on here? Are workers not good anymore?

ConstantinOP•10/16/24, 8:01 AM

hey, i'm following this guide https://developers.cloudflare.com/workers/frameworks/framework-guides/astro/ to create an Astro Worker .. all good, however, when i try to create a wrangler.toml file, i'm not sure what the path for the main key should be. any ideeas?

ConstantinOP•10/16/24, 8:53 AM

nope, the ci pipline is failing with this error

ConstantinOP•10/16/24, 8:53 AM

this is how the action looks

ConstantinOP•10/16/24, 9:23 AM

oh, i see .. i wrongly thought that this deploy in package json is the same in action

ConstantinOP•10/16/24, 9:24 AM

but i think there are two different commands (one for the project, another for wrangler)

Original message was deleted

Alexander Hupfer•10/16/24, 12:50 PM

Which package?

nikita•10/16/24, 2:57 PM

Hi all, I need your help with the Worker setup. We have a Worker with the wildcard for the hostname in the routes in wrangler.toml:

routes = [ 
    { pattern="*/cdn/*", zone_id="xxxxxxId" }
]

routes = [ 
    { pattern="*/cdn/*", zone_id="xxxxxxId" }
]

The reason we have this setup is that we wanted the Worker to trigger for our clients’ custom domains dynamically connected via Cloudflare for SaaS. e.g.

example.org is our domain
client1.org CNAME cname.example.org -> client1 domain connected to ours
client2.org CNAME cname.example.org -> client2 domain connected to ours

example.org is our domain
client1.org CNAME cname.example.org -> client1 domain connected to ours
client2.org CNAME cname.example.org -> client2 domain connected to ours

The same worker used to trigger for requests to

example.org

example.org

client1.org

client1.org

client2.org

client2.org

. Recently, when publishing the Worker, we started to experience the error :

Route pattern must include zone name: example.org [code: 10022]

Route pattern must include zone name: example.org [code: 10022]

It looks like something has changed recently. What is the recommended Wrangler routes setup for the worker to trigger for every dynamically connected custom domain in Cloudflare?

Jadugar_Jaggu•10/16/24, 3:00 PM

In Cloudflare Workers, the uploaded script is undergoing modifications by internal algorithms during the deployment process via Wrangler. Specifically, the original function in the script, found at this GitHub link: https://github.com/subhendukundu/worker-auth-providers/blob/d979f59fb1eb9129de7dcb8e6209cf2c120fc7c9/dist/providers/google/redirect.js#L3, has been altered, leading to unexpected behavior in production. Locally, everything functions as intended.

The issue arises from a discrepancy between the original code and the uploaded version. The package author suggests using the redirectTo parameter instead of redirectUrl. I am correctly passing the redirect_uri value through the redirectTo variable, but in the uploaded worker script, redirectTo is missing from the function. This bug is significantly impacting user sign-in and sign-up processes, as this package is responsible for handling the Google sign-in flow.

I would suggest to look into it

GitHub

worker-auth-providers/dist/providers/google/redirect.js at d979f59f...

worker-auth-providers is an open-source providers to make authentication easy with workers. Very lightweight script which doesn't need a lot of dependencies. Plug it with any framework or t...

JJadugar_Jaggu In Cloudflare Workers, the uploaded script is undergoing modifications by intern...

Jadugar_Jaggu•10/16/24, 3:01 PM

This is an serious issue. Cloudflare team should look into this matter

Nnikita Hi all, I need your help with the Worker setup. We have a Worker with the wildc...

Chaika•10/16/24, 3:01 PM

Route pattern must include zone name: example.org [code: 10022]

afaik that error means you don't have CF For SaaS enabled on the zone you're trying to add the route on

JJadugar_Jaggu In Cloudflare Workers, the uploaded script is undergoing modifications by intern...

Chaika•10/16/24, 3:04 PM

Wrangler just uses esbuild, shouldn't do anything that crazy. Your code you showed is equal to the older version of the package: https://github.com/subhendukundu/worker-auth-providers/blob/7548cda3470072a9a276fd32637b079140728172/dist/providers/google/redirect.js so probably just not updating properly/looking at code from an old push or something else

CChaika Wrangler just uses esbuild, shouldn't do anything that crazy. Your code you show...

Jadugar_Jaggu•10/16/24, 3:06 PM

You can see here in VS CODE, I have the latest one

Jadugar_Jaggu•10/16/24, 3:09 PM

and one more thing this issue arises recently, may be this month, previously it was working fine. Thats why I checked the uploaded code in cloudflare to find some traces

Jadugar_Jaggu•10/16/24, 3:17 PM

Never Mind, its fixed now, after removing and adding the pakage again

Shados•10/16/24, 4:19 PM

Hi everyone. I've searched on the discord and the docs, and there's discussion around worker size limit, but couldn't figure out exactly what "counts" or how to calculate the exact size of my app.

We are on an enterprise plan, and I know right now we're nowhere close to the limit with our prod app, but I want to plan for the future. I know its gzipped size, 10mb limit, but what "counts"? Is it everything thats uploaded to the worker? Do the new static asset support count or not? I upload sourcemaps with the code, do the sourcemaps count?

Any patterns people use to reduce size that I should know from day 1? (eg: obviously large static assets should be hosted outside of the Worker. Anything else in the captain obvious category)?