Cloudflare Developers•15mo ago

People would disagree with the WAF rules and ddos protection

DDavid Wang People would disagree with the WAF rules and ddos protection

fry69•10/23/24, 10:56 PM

Unnecessary overhead when you just want raw performance, like writing your own iptables scripts

David WangOP•10/23/24, 10:57 PM

Um. No. Cf handling the firewall and ddos protection takes the overhead off the server

David WangOP•10/23/24, 10:57 PM

Although i heard proxying adds time to the request cycle. Is that right?

DDavid Wang Um. No. Cf handling the firewall and ddos protection takes the overhead off the ...

fry69•10/23/24, 11:00 PM

As long as you have an origin server which serves stuff you need to administrate that, e.g. with tools that are available there. I can only recommend to a have a look at ufwufw, it is pretty simple and very useful for these tasks. Also helps avoiding yourself shooting in the foot, aka locking yourself out by accident.

David WangOP•10/23/24, 11:01 PM

So far my foot is free of bullet holes

David WangOP•10/23/24, 11:01 PM

I've heard of ufw but i don't see the need for it

DDavid Wang Although i heard proxying adds time to the request cycle. Is that right?

fry69•10/23/24, 11:02 PM

Of course a proxy adds latency and processing time when the request needs to get forwarded to the origin server, but if static content can get cached by the proxy, it reduces this overhead, so it should be in almost all cases advantageous.

David WangOP•10/23/24, 11:02 PM

Having CF proxy on doesn't automatically mean caching is on, does it?

DDavid Wang Having CF proxy on doesn't automatically mean caching is on, does it?

fry69•10/23/24, 11:04 PM

If your origin server sends content with correct cache flags, I'd be surprised if the CF proxy would not cache those

fry69•10/23/24, 11:05 PM

You can turn the cache off in a "development mode"

fry69•10/23/24, 11:08 PM

Looks like 4h cache time is default for a standard proxy setup

David WangOP•10/23/24, 11:10 PM

Hm. Ok

David WangOP•10/23/24, 11:10 PM

I'll have to look into that

RyanKnack•10/23/24, 11:58 PM

This is a full documentation of CF's default caching behavior.

This is useful cuz if you need specialized caching behavior, this can tell you where to look and what to cache if you need it in your use case

https://developers.cloudflare.com/cache/concepts/default-cache-behavior/

Cloudflare Docs

Default cache behavior | Cloudflare Cache (CDN) docs

Cloudflare respects the origin web server’s cache headers in the following order unless an Edge Cache TTL cache rule overrides the headers. Refer to the Edge TTL section for details on default TTL behavior.

fry69•10/24/24, 12:04 PM

Oh, Workflows are in beta now -> https://discord.com/channels/595317990191398933/1040420029080018945/1298979412099989566 (blog announcement is not yet online or the URL is wrong)
Update: -> https://blog.cloudflare.com/building-workflows-durable-execution-on-workers/ is now online
See also this new channel -> workflows

The Cloudflare Blog

Build durable applications on Cloudflare Workers: you write the Wor...

Cloudflare Workflows is now in open beta! Workflows allows you to build reliable, repeatable, long-lived multi-step applications that can automatically retry, persist state, and scale out. Read on to learn how Workflows works, how we built it on top of Durable Objects, and how you can deploy your first Workflows application.

Original message was deleted

fry69•10/24/24, 1:02 PM

Great, it is online now, thanks.

VVikash I can’t complete cloudflare captchas because of error 600010

Felipe Souza•10/24/24, 2:30 PM

Same error here. What did you execute to solve this issue?

Sercan•10/24/24, 2:43 PM

anyone knows that when face detection will be announced to public (no accepts to private beta) as described here ? https://blog.cloudflare.com/whats-next-for-cloudflare-media/#optimize-images-of-people-with-automatic-face-cropping-for-cloudflare-images

The Cloudflare Blog

What’s new with Cloudflare Media: updates for Calls, Stream, and Im...

With Cloudflare Calls in open beta, you can build real-time, serverless video and audio applications. Cloudflare Stream lets your viewers instantly clip from ongoing streams. Finally, Cloudflare Images now supports automatic face cropping and has an upload widget that lets you easily integrate into your application.

Nelson Sousa•10/24/24, 5:19 PM

Hi everyone, first time looking into this flow. Let's imagine that a website has an option to upload an image. Let's say that image goes into Cloudflare R2 or some other cloud storage.

Is there a way to automatically trigger some event to transform this original image into multiple ones, with different sizes? Let's say 100x100, 200x200, etc? Without a proper backend running, but allowing us to pre-processing it?

I was thinking in something like a Cloudflare worker as a service, which triggers somehow on a new image upload and generate new ones, with some lib and finally uploading them into R2 again.

Am I in a fog or is this something doable and okayish? I'd need a free plan to test this, so alternatives like Cloudflare Images aren't really an option right now, afaik. Thank you

Idle•10/24/24, 5:36 PM

:confusedpixeljoe:

マ

マイケル•10/24/24, 5:43 PM

Nelson Sousa•10/24/24, 5:43 PM

TL;DR: transform original image into multiple ones with different sizes. Save on Cloudflare R2. Pre-processing (not at each request)

NNelson Sousa Hi everyone, first time looking into this flow. Let's imagine that a website has...

valkyrie_pilot•10/24/24, 5:58 PM

i think the biggest problem is doing it on upload

valkyrie_pilot•10/24/24, 5:58 PM

if you can upload through a server this is super easy

Nelson Sousa•10/24/24, 5:58 PM

But then the server is the one responsible for getting the image and pre-processing it, in the same sync flow, right?

Cryofuel•10/24/24, 5:58 PM

Hello beautiful people.
I am looking to sign up for the pro account that includes WAF.
https://www.cloudflare.com/en-gb/application-services/products/waf/

One question though - am I understanding the documentation correctly that custom TLS are supported and I only need the Business Account if I want to buy certificates from CloudFlare directly ?
https://developers.cloudflare.com/ssl/edge-certificates/custom-certificates/

CCryofuel Hello beautiful people. I am looking to sign up for the pro account that includ...

valkyrie_pilot•10/24/24, 6:00 PM

no, you need buisness for this.

NNelson Sousa But then the server is the one responsible for getting the image and pre-process...

valkyrie_pilot•10/24/24, 6:00 PM

Not necessarily. You could upload it and kick off a background task

[

[GOD] YUMRAAAJ•10/24/24, 6:00 PM

Dear Sir/Madam,

valkyrie_pilot•10/24/24, 6:00 PM

guess i can't answer the question :3

[

[GOD] YUMRAAAJ•10/24/24, 6:01 PM

I am not able to connect to WARP+ from 2 days and the error says:

[

[GOD] YUMRAAAJ•10/24/24, 6:01 PM

Status: Unable to connect Error reason: Happy Eyeballs MITM Failure Error code: CF_HAPPY_EYEBALLS_MITM_FAILURE Error description: Unable to establish WARP connection. Confirm if this device’s firewall allows WARP Ingress and/or UDP traffic. Learn more: https://cfl.re/CF_HAPPY_EYEBALLS_MITM_FAILURE

Cloudflare Docs

Client errors | Cloudflare Zero Trust docs

This page lists the error codes that can appear in the WARP client GUI. If you do not see your error below, refer to common issues or contact Cloudflare Support.

Vvalkyrie_pilot Not necessarily. You could upload it and kick off a background task

Nelson Sousa•10/24/24, 6:01 PM

yeah, that's another way indeed. A lot of configs, tho

NNelson Sousa yeah, that's another way indeed. A lot of configs, tho

valkyrie_pilot•10/24/24, 6:04 PM

true. cloudflare seems as if they've added triggers since i last looked?
https://developers.cloudflare.com/r2/tutorials/upload-logs-event-notifications/

valkyrie_pilot•10/24/24, 6:05 PM

it's paid though.

Vvalkyrie_pilot true. cloudflare seems as if they've added triggers since i last looked? https:/...

Nelson Sousa•10/24/24, 6:05 PM

Oh, so maybe I can use this event notifications

Would a worker be able to look into these events and transform images? Or it is too much work?

NNelson Sousa Oh, so maybe I can use this event notifications 🤔 Would a worker be able to lo...

valkyrie_pilot•10/24/24, 6:05 PM

yeah, i think one could

Nelson Sousa•10/24/24, 6:06 PM

No solution then

Maybe some background server then..

[[GOD] YUMRAAAJ Status: Unable to connect Error reason: Happy Eyeballs MITM Failure Error code: ...

[

[GOD] YUMRAAAJ•10/24/24, 6:31 PM

I have given access to all these IPs and UDPs but still showing the same error!

[

[GOD] YUMRAAAJ•10/24/24, 6:33 PM

Please HELP ME!!

NNelson Sousa But then the server is the one responsible for getting the image and pre-process...

WTDawson9•10/24/24, 8:16 PM

What I would do is, store it, add it to a queue and then process one image every so often

WWTDawson9 What I would do is, store it, add it to a queue and then process one image every...

Nelson Sousa•10/24/24, 8:17 PM

What kind of queue do you recommend?

NNelson Sousa What kind of queue do you recommend?

WTDawson9•10/24/24, 8:18 PM

It depends on what you would use as a backend

Nelson Sousa•10/24/24, 8:18 PM

Whatever is best

main stack is C# but working now with TS

WTDawson9•10/24/24, 8:19 PM

For me personally, I would:

- Receive the image from the user or whatever the API route is
- Save it and tag it (Give it an ID and save information about it for later on)
- Add it to the end of some kind of queue file
- Every so often, go to the first image on the queue, take it off the queue, process it and then send it to Cloudflare R2

Nelson Sousa•10/24/24, 8:20 PM

Got it

Nelson Sousa•10/24/24, 8:20 PM

Thanks for your feedback

Nelson Sousa•10/24/24, 8:21 PM

It’s interesting

WWTDawson9 For me personally, I would: - Receive the image from the user or whatever the A...

valkyrie_pilot•10/24/24, 8:29 PM

what's the reasoning for only doing so every so often?

People would disagree with the WAF rules and ddos protection

Similar Threads

Similar Threads

Similar Threads