@Mr. Catchii💯 You're in a better situation than me. Do you request the pre-signed url from the serv

@Mr. Catchii

You're in a better situation than me. Do you request the pre-signed url from the server or browser end? I requested the url from the server end, and it doesn't work on my broswer end.

YYZ @Mr. Catchii💯 You're in a better situation than me. Do you request the pre-sign...

Deleted User•11/12/24, 4:52 PM

uh browser end

Deleted User•11/12/24, 4:52 PM

i just put the cdn file

Deleted User•11/12/24, 4:52 PM

in frontend

Deleted User•11/12/24, 4:52 PM

and it works

Deleted User•11/12/24, 4:52 PM

idk

Noa•11/12/24, 5:03 PM

Hi! Can I use the S3 API to access a public bucket owned by someone else? The use case is that I want others to be able to get and list objects of my public bucket using the S3 API in python (boto3).

This answer suggests it's not possible but I wanted to check to be sure: https://community.cloudflare.com/t/get-public-bucket-url-using-boto3/470008

If this is the case, I can see two other options but they don't seem ideal to me:

I create an API key with read access that I distribute to everyone who will access the bucket
I use the requestsrequests to download files from r2.dev url. But then I can only download files that I know the filename of, I can't list the files. And the documentation says that rate limits apply.

Noa•11/12/24, 5:05 PM

That's great, but it adds complexity to distribute the api key so I'd prefer if there's another way

Noa•11/12/24, 5:19 PM

Thanks for the info, but I'm afraid custom domain is infeasible for my use case as well

kubectl•11/12/24, 7:47 PM

Heyyyo! Whats the general recommended way to protect against hotlinking? I.e. prevent another site loading the content from my r2 bucket? Lets assume they do not send a Referer Header.

Original message was deleted

kubectl•11/12/24, 7:59 PM

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy#integration_with_html
its very much possible sadly

MDN Web Docs

Referrer-Policy - HTTP | MDN

The HTTP Referrer-Policy response header controls how much referrer information (sent with the Referer header) should be included with requests.
Aside from the HTTP header, you can set this policy in HTML.

kubectl•11/12/24, 8:01 PM

and then what? Its like you said, ppl can spoof whatever i put in there

Deleted User•11/12/24, 9:03 PM

yeah i going crazy with this r2 stuff

Deleted User•11/12/24, 9:03 PM

the cors is killing me

Deleted User•11/12/24, 9:04 PM

nothing works

Advany•11/13/24, 9:45 AM

I keep getting get: Unspecified error (0) when using r2 with workers. It happens randomly. Most of the times it works but fails a couple of times a day. I also created a ticket on 15 oct (month ago) with case id 01231975 but no response after the initial.

Original message was deleted

Advany•11/13/24, 9:49 AM

couple 10k a day orso

AAdvany couple 10k a day orso

Advany•11/13/24, 9:49 AM

worker itself is doing more, but the r2 binding using get is called like 10k times a day

Original message was deleted

Advany•11/13/24, 9:50 AM

no idea, don't log that... could that be an issue? is there a limit in req/s?

Original message was deleted

Advany•11/13/24, 9:50 AM

yeah, get requests!

Original message was deleted

Advany•11/13/24, 9:51 AM

I can only find https://developers.cloudflare.com/r2/platform/limits/ this. That seems like the public bucket is limited. Can't find anything on limits of the binding to get a object...

Cloudflare Docs

Limits | Cloudflare R2 docs

Managed public bucket access through an r2.dev subdomain is not intended for production usage and has a rate limit applied to it. If you exceed the rate limit, requests through your r2.dev subdomain will be temporarily throttled and you will receive a 429 Too Many Requests response. For production use cases, consider linking a custom domain to y...

Original message was deleted

Advany•11/13/24, 9:53 AM

yeah, will do that!

Original message was deleted

Advany•11/13/24, 10:43 AM

I found one key, that was being accessed like 420 times a minute. I am adding a 1 minuut cache to that to see if it solves the issue...

Original message was deleted

Advany•11/13/24, 10:54 AM

yeah, so that was peak. Not 420/m all day long. So seems like there are a couple of peaks. And during those peaks its failing. Maybe there is a limit per key per minute orso?

Original message was deleted

Advany•11/13/24, 12:21 PM

can reduce the load by a lot with caching I see. Ill try 1 minute cache first, and see if that smooths out the curve. Wierd error btw...

would expect 429 or something. Not Unspecified error (0)

DDeleted User yeah i going crazy with this r2 stuff

kubectl•11/13/24, 1:09 PM

for me that the same aswell, i have only my domain authorized, but there are no cors headers sent by r2 for some reason.

Kkubectl for me that the same aswell, i have only my domain authorized, but there are no ...

Deleted User•11/13/24, 1:41 PM

did you add cors rules?

Deleted User•11/13/24, 1:42 PM

DDeleted User did you add cors rules?

kubectl•11/13/24, 1:53 PM

yes

kubectl•11/13/24, 1:54 PM

kubectl•11/13/24, 1:54 PM

the censored part is the domain my website run under

kubectl•11/13/24, 2:09 PM

merci <3

boldpix•11/13/24, 2:36 PM

Hi everyone
Even if we restrict R2 to allow direct file access only from the machine, is there a risk that users could still access the file unauthorized by finding its direct address?

Original message was deleted

boldpix•11/13/24, 3:04 PM

We are considering using a custom domain, but what is the difference between using a custom domain and a default domain?

Original message was deleted

boldpix•11/13/24, 3:28 PM

Ok, We have a domain in cloudflare and we can use that domain

boldpix•11/13/24, 3:31 PM

Can you answer my question?

Original message was deleted

boldpix•11/13/24, 4:07 PM

Is it possible to create a token that is exclusive to a machine, and by possessing this token, only that machine can access a file?

@Mr. Catchii💯 You're in a better situation than me. Do you request the pre-signed url from the serv

Similar Threads

Similar Threads

Similar Threads