Cloudflare Developers•15mo ago

hello, how can i block access from *.worker.dev in my server/script ?

Jjazz1611 hello, how can i block access from *.worker.dev in my server/script ?

Cyb3r-Jak3•10/22/24, 1:22 PM

Add workers_dev = falseworkers_dev = false to your wrangler.toml file

jazz1611OP•10/22/24, 1:53 PM

my server are using nginx + php, some guys use domain *.worker.dev access to my site for exploit

jazz1611OP•10/22/24, 2:13 PM

so i need catch cf-worker header, right ?

Erisa•10/22/24, 2:17 PM

yes, block requests with a request header named cf-worker

jazz1611OP•10/22/24, 2:23 PM

got it. thank you

ac•10/22/24, 7:20 PM

Is there a hard limit to the number of service bindings a worker can have? I know there is 128 env variables/worker, but wondering specifically about service bindings since there's nothing on the limits page (https://developers.cloudflare.com/workers/platform/limits/)

Cloudflare Docs

Limits | Cloudflare Workers docs

Cloudflare Workers plan and platform limits.

Advany•10/22/24, 9:41 PM

trying to deploy, but getting: binding DB of type d1 failed to generate. Please try again later or contact support. [code: 10021]

itsmatteomanf•10/22/24, 9:42 PM

we know, it's been escalated

Advany•10/22/24, 9:42 PM

using

wrangler 3.82.0

Advany•10/22/24, 9:42 PM

time for bed, you guys are fast lol

Pedagogy•10/22/24, 10:03 PM

Hey all. New to Cloudflare workers and pages. I have a static website but would like to use a worker call for a request of a large image asset stored in Cloudflare R2. What are the best security practices for workers? I am assuming the worker is deployed publicly and the link is revealed to anyone who reads or scrapes my .js file. Is the best secuirty just CORS policies in the worker itself?

AAdvany using ⛅️ wrangler 3.82.0

Walshy•10/22/24, 10:38 PM

Fixed - https://www.cloudflarestatus.com/incidents/f907j39814l7

Errors Deploying Workers with D1 Database Bindings

Enom•10/22/24, 11:37 PM

any way to bring golang to workers?

Enom•10/22/24, 11:37 PM

also how to quickly estimate costs as "Metrics" is not updating real-time for me?

Enom•10/22/24, 11:38 PM

EEnom any way to bring golang to workers?

Cyb3r-Jak3•10/23/24, 1:09 AM

You can via WASM https://github.com/syumai/workers

GitHub

GitHub - syumai/workers: Go package to run an HTTP server on Cloudf...

Go package to run an HTTP server on Cloudflare Workers. - syumai/workers

Original message was deleted

fry69•10/23/24, 9:45 AM

Please do not crosspost, it makes it hard to follow discussions -> kv

danielsundq•10/23/24, 9:53 AM

Yeah sorry, just checking if there is more response in this channel. I will delete it.

RReelMoon I Can't able to access workers from my account I Can Deploy worker but can't a...

fry69•10/23/24, 1:47 PM

Can you test/run your worker locally?

Enom•10/23/24, 2:11 PM

is there any tool that could real-time tell or output the correct cost/resource usage of the function? (CPU time)

�

😈 Donkey 💫•10/23/24, 3:46 PM

Since, I assume that RPC is faster than Fetch (?) in latency
Do you guys know how much is it faster?

Any reason else for choosing RPC over FETCH? please share your thoughts

�

😈 Donkey 💫•10/23/24, 3:48 PM

Docs didn't point out any pros using RPC: https://developers.cloudflare.com/workers/runtime-apis/rpc/

Cloudflare Docs

Remote-procedure call (RPC) | Cloudflare Workers docs

The built-in, JavaScript-native RPC system built into Workers and Durable Objects.

�😈 Donkey 💫Docs didn't point out any pros using RPC: https://developers.cloudflare.com/work...

Hello, I’m Allie!•10/23/24, 3:50 PM

I think it is mostly in the simplicity of use? You don't need to JSON.stringifyJSON.stringify data when you pass it around

�

😈 Donkey 💫•10/23/24, 3:51 PM

thanks, It doesn't require serialized data

�😈 Donkey 💫thanks, It doesn't require serialized data

Hello, I’m Allie!•10/23/24, 3:53 PM

The other thing too is that it might be faster because you aren't passing an entire RequestRequest/ResponseResponse around

�

😈 Donkey 💫•10/23/24, 3:57 PM

since the last time I read docs, now It has pretty new things, like passing a stub/function, amazing

code.JayS•10/23/24, 8:11 PM

hey, just a quick one. is there an easy way to restrict access to my cf worker? it handles my emails (via resend) but everyone can access the provided url

Constantin•10/24/24, 12:56 AM

hey there, i'm getting

Cannot bundle Node.js built-in "events"

Cannot bundle Node.js built-in "events"

error when building a worker. Does events is missing from the CF workers runtime?

Henry Black•10/24/24, 1:49 AM

Is there an easy/quick way of checking the compatibility of a node package with the workerd runtime? Or perhaps a resource that lists Cloudflare compatible packages?

Constantin•10/24/24, 6:02 AM

@Henry Black there's this place https://developers.cloudflare.com/workers/runtime-apis/

Cloudflare Docs

Runtime APIs | Cloudflare Workers docs

The Workers runtime is designed to be JavaScript standards compliant

and web-interoperable. Wherever possible, it uses web platform APIs, so that code can be reused across client and server, as well as across WinterCG

JavaScript runtimes.

Ccode.JayS hey, just a quick one. is there an easy way to restrict access to my cf worker? ...

Ashley•10/24/24, 7:50 AM

https://developers.cloudflare.com/workers/wrangler/configuration/#inheritable-keys set workers_dev = false in your wrangler.toml

Cloudflare Docs

Configuration | Cloudflare Workers docs

Use a wrangler.tomlwrangler.toml configuration file to customize the development and deployment setup for your Worker project and other Developer Platform products.

Ghost Skull Gamer 1221•10/24/24, 1:05 PM

Hi can anyone help with an issue I am getting with workers?

I am experiencing an issue with the workers while uploading logs to my Elasticsearch engine. I am encountering the following:

When using the URL
https://gcb-dynamic-seal.tech-119.workers.dev/cd05db77-5f07-4359-7f92-48f98da85b00 I am able to send logs successfully.

However, with the custom domain
https://seal.cgcb.info/cd05db77-5f07-4359-7f92-48f98da85b00 I receive the following error:

"message": [
    "Failed to send log to Elasticsearch:",
    "error code: 521"

"message": [
    "Failed to send log to Elasticsearch:",
    "error code: 521"

CConstantin @Henry Black there's this place https://developers.cloudflare.com/workers/runtim...

Henry Black•10/24/24, 1:16 PM

Thanks @Constantin, although I think I worded my questions badly, apologies. I was wondering if anyone knew of a way of easily finding out if an NPM package is compatible with workerd. I.e. if the package is using any non-supported Node apis.

Currently I have been installing a package and finding out but it's a little tedious and I was wondering if someone had created a list of packages that are safe for use in workerd (or knew how to quickly check without installing / digging through code)

Hacker Factor•10/24/24, 1:58 PM

Probably an easy question, but I can't find the answer. What are the volume limits (number of requests) on Workers? (Free, Pro, Business, etc) And is it per worker or per account?

HHacker Factor Probably an easy question, but I can't find the answer. What are the volume limi...

fry69•10/24/24, 2:03 PM

Anything missing here? -> https://developers.cloudflare.com/workers/platform/limits/

Ffry69 Anything missing here? -> https://developers.cloudflare.com/workers/platform/lim...

Hacker Factor•10/24/24, 2:07 PM

Thank you. Wait... I see the limit of 100,000 requests per day for free. Am I reading this right: for $5/mo, I get unlimited requests? (Sounds great if that's correct.)

HHacker Factor Thank you. Wait... I see the limit of 100,000 requests per day for free. Am I re...

fry69•10/24/24, 2:16 PM

No, not unlimited, you get 30 Mio CPU milliseconds for $5 per month

fry69•10/24/24, 2:16 PM

(CPU time not wall time)

Hello, I’m Allie!•10/24/24, 2:20 PM

Note that if you go over, you pay more

Hello, I’m Allie!•10/24/24, 2:20 PM

Not that it stops you from going over

Hacker Factor•10/24/24, 2:51 PM

What are the limits for the Pro plan (compared to the $5 paid plan)?

HHacker Factor What are the limits for the Pro plan (compared to the $5 paid plan)?

Hello, I’m Allie!•10/24/24, 2:59 PM

Your Wallet, basically

HHello, I’m Allie!Your Wallet, basically

Hacker Factor•10/24/24, 3:06 PM

That's not helping. With $5, I get 30 million requests per month. That's good. What if I need 60 million? With the $5 plan, I pay something like $0.30 per million, so that's an additional $9 for that month. What is the request limit for the Pro plan before getting overages? (If one of my services is getting 60 million requests per month, then wait until I bring over the other three services...)

HHacker Factor That's not helping. With $5, I get 30 million requests per month. That's good. W...

Hello, I’m Allie!•10/24/24, 3:09 PM

Basically, with the paid plan, you get the 10 million request/30 million CPU milliseconds a month included, then pay $0.3 per additional million requests, and $0.02 per additional million CPU milliseconds. That's it.

Hello, I’m Allie!•10/24/24, 3:10 PM

You can scale to billions of requests with the exact same pricing

Hello, I’m Allie!•10/24/24, 3:10 PM

There isn't a cap for "number" of requests at that point

hello, how can i block access from *.worker.dev in my server/script ?

Similar Threads

Similar Threads

Similar Threads