I asked yesterday but didn't provide an example. I have this R2 custom domain setup automatically by

I asked yesterday but didn't provide an example. I have this R2 custom domain setup automatically by "connecting" it. It's returning a 301 for any URL back to the URL requested. Here's an example: https://sniff.lololo.lol/hello.txt -- I have checked every set of config for the zone and there's no page rules / redirects / etc.

Original message was deleted

Hard@Work•12/19/24, 6:14 PM

Weird

Original message was deleted

tokieOP•12/19/24, 6:15 PM

there's no redirects enabled for the domain -- except maybe those for https in the ssl config

tokieOP•12/19/24, 6:16 PM

does r2 only work over http ?

tokieOP•12/19/24, 6:16 PM

i disabled https rewrites an hour ago

tokieOP•12/19/24, 6:17 PM

"Automatic HTTPS Rewrites" in the edge certs section that is

Ttokie I asked yesterday but didn't provide an example. I have this R2 custom domain se...

Chaika•12/19/24, 6:19 PM

Your SSL/TLS mode is "Off"

CChaika Your SSL/TLS mode is "Off"

tokieOP•12/19/24, 6:19 PM

AHAH

tokieOP•12/19/24, 6:19 PM

thanks!

Chaika•12/19/24, 6:20 PM

should go Full (Strict) or Strict (SSL-Only)

Original message was deleted

Chaika•12/19/24, 6:20 PM

enough to disable the redirect? sure.
something you should use in production? never

tokieOP•12/19/24, 6:20 PM

yeah, it was disabled and then http->https redirects were enabled

tokieOP•12/19/24, 6:20 PM

so it got into a little loopies

Chaika•12/19/24, 6:24 PM

I thought R2 Custom Domains were HTTPS only/enforced by the zone under the R2 Custom Domain, evidently not tho

Original message was deleted

Hard@Work•12/19/24, 6:25 PM

This is via the latest via Homebrew, so it should

be up to date

Hard@Work•12/19/24, 6:25 PM

Will check later

Original message was deleted

Hard@Work•12/19/24, 6:26 PM

I have an old key, and no region, but otherwise same

Original message was deleted

Hard@Work•12/19/24, 6:27 PM

Isn't Server-Copy a standard thing for S3?

Original message was deleted

Hard@Work•12/19/24, 6:29 PM

Can do Multipart Copy?

fritex•12/19/24, 6:42 PM

May I ask could we expect somewhere in future to be able to filter buckets on the bucket list, e.g. per location / jurisdiction?

Might be it's able to do it via API, but not on the Dashboard, yet.
Thank you!

fritex•12/19/24, 6:50 PM

If we have e.g. sub-domain on bucket, example:
a) mydomain.hr is main domain
b) then I've got sub-domain sub.mydomain.hr
c) for r2.sub.mydomain.hr -> do I need to pruchase Advanced Certificate Manager to cover that R2 Custom domain which seems to me to be an deep-level sub-domain?

Original message was deleted

Eric Ellis•12/19/24, 6:51 PM

I wonder if this is related to my issue...

EEric Ellis Hello, I've just configured an R2 storage bucket and seeing some failures (inter...

Eric Ellis•12/19/24, 6:52 PM

here

Eric Ellis•12/19/24, 6:52 PM

it's a periodic seize up issue

Eric Ellis•12/19/24, 6:52 PM

just goes non responsive

Eric Ellis•12/19/24, 6:53 PM

i do the same operation maybe 500 times and it has various amounts of latency from non to 20 seconds to a full timeout

Eric Ellis•12/19/24, 6:53 PM

this is a get operation

Eric Ellis•12/19/24, 6:53 PM

very few

Eric Ellis•12/19/24, 6:54 PM

in what timeframe?

Eric Ellis•12/19/24, 6:54 PM

it depends on if a CI job is running. but typically none for a significant block of time

Eric Ellis•12/19/24, 6:54 PM

so when doing this test probably 0

Eric Ellis•12/19/24, 6:58 PM

when i did the rclone from digital ocean i was also seeing intermittent full hangs. not sure if that's similar to what you mentioned. at the time i couldn't tell if it was them or R2

Eric Ellis•12/19/24, 6:59 PM

should not be unstable...

Original message was deleted

fritex•12/19/24, 6:59 PM

It works! No need to purchase ACM

Tested few moments ago

Eric Ellis•12/19/24, 6:59 PM

yes but this just started happening when switching to R2. same application did not show this behavior with digital ocean

Eric Ellis•12/19/24, 7:00 PM

also since it's gitlab i can't easily change the code

Eric Ellis•12/19/24, 7:00 PM

not a runner. it's the server backend

Eric Ellis•12/19/24, 7:01 PM

which i am running self hosted

CChaika should go Full (Strict) or Strict (SSL-Only)

tokieOP•12/19/24, 7:44 PM

ohhh, it was using "automatic" which made a recommendation of disabling ssl

kamama•12/20/24, 5:31 AM

Hi folks, is there any cloudflare native services can do file scan like AWS GuardDuty ?

rakesh8754•12/20/24, 6:32 AM

Hello everyone,
We are uploading an image to R2 using a presigned URL. As part of our workflow, once the upload is successful, we immediately make a request to retrieve the image using another presigned URL.
However, we are occasionally encountering issues where the request to retrieve the image fails with errors such as "Blocked by ORB" or a 404 (Not Found).
Is there a known delay between the upload and the image becoming available for retrieval? How can we address this issue to ensure the image is reliably accessible immediately after the upload?

petazz.•12/20/24, 9:28 AM

Hi guys! This seems like a very simple thing but this puzzles me a lot. I was trying to access my R2 bucket using boto3 (using Ubuntu running inside Docker) but I received a TLS handshake error.

Long story short it seems OpenSSL is raising an alert number 40 if I don't specify Server Name Indication (SNI)

This is reflected using the openssl client
$ openssl s_client -connect <account_id>.r2.cloudflarestorage.com:443
CONNECTED(00000003)
407732BA387F0000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40

But if I specify the SNI with
$ openssl s_client -connect <account_id>.r2.cloudflarestorage.com:443 -servername cloudflarestorage.com
CONNECTED(00000003)

Then there is not error.

Why should I present the servername and how should this be done with boto3?