From what I can tell, CF's proxy does not recognize WebSocket ping/pong frames. It seems to consider

From what I can tell, CF's proxy does not recognize WebSocket ping/pong frames. It seems to consider a WebSocket connection dead if no application-level messages are sent, even if the server sends pings, the client responds with pongs, and the server successfully receives them. CF ignores these keep-alive signals and still terminates the connection after 90 seconds.

KimboOP•2/20/25, 2:06 AM

I feel this should be more explicitly documented. The 'Best Practices' section suggests implementing keepalive, but it doesn’t state that it’s required to prevent CF from terminating the WebSocket connection after 90 seconds. This could lead to confusion for developers who assume standard WebSocket ping/pong behavior is enough.

Edit: to be more precise

https://developers.cloudflare.com/network/websockets/

Cloudflare Docs

WebSockets · Cloudflare Network settings docs

Cloudflare supports proxied WebSocket connections without additional configuration.

KKimbo From what I can tell, CF's proxy does not recognize WebSocket ping/pong frames. ...

Isaac McFadyen•2/20/25, 2:26 AM

From the screenshot you sent it doesn't look like there are any pings, only pongs

Isaac McFadyen•2/20/25, 2:26 AM

Is your server replying to what Chrome is sending there?

Isaac McFadyen•2/20/25, 2:26 AM

It should reply within 20s or the connection is considered dead per RFC

KimboOP•2/20/25, 2:31 AM

Please do look at the screenshot more closely, it does show the server sending ping, and the client sending back pong. Despite this keep alive most definitely working, CF proxy kills the connection. I am not the only to have hit this, as I have seen other apps having to add an app level keep alive just because of CF.

Isaac McFadyen•2/20/25, 2:57 AM

Ah yeah, apologies I just missed that.

Apoc•2/20/25, 5:59 AM

Does anybody know if it's possible to disable Enterprise Bot Management for a single subdomain? We have requests going cross-zone, and the

__cf_bm

__cf_bm

cookie is causing our Tiered Cache implementation to be skipped because there's a

Set-Cookie

Set-Cookie

header that we have zero control over apparently.

Apoc•2/20/25, 6:16 AM

It doesn't as long as the requests are in the same zone

Apoc•2/20/25, 6:16 AM

And yes, we're on enterprise

Apoc•2/20/25, 6:18 AM

That's my assumption as well, but I also see it the other way around. It's a different zone, so the rules basically act like it's coming from the public internet, so I get it. But it's still incredibly annoying

Apoc•2/20/25, 6:18 AM

Less concerned with the "why" at the moment, more so the "how do I fix this" lol

Apoc•2/20/25, 6:19 AM

You can only add SBFM rules in the dash

Apoc•2/20/25, 6:19 AM

We tried that already, makes no difference

Apoc•2/20/25, 6:20 AM

Event went as far as testing "skip everything", just in case

Apoc•2/20/25, 6:22 AM

Well, we can't do that... Too much traffic (and too many bots)... It's not impacting right this second. We already impacted it when we rolled out the change and found out it broke tiered cache

Apoc•2/20/25, 6:23 AM

Yeah, they're off

Apoc•2/20/25, 6:23 AM

Already put in a ticket, I'll wait on that. It's 1am anyway

enavarrocu•2/20/25, 9:05 AM

Hello everyone, I have a quick question. Is there a way to change the git repository of a cloudflare page?

SShelby•2/20/25, 1:22 PM

hi all

Tekatren (Djkáťo)•2/20/25, 1:26 PM

I can't remember what repo I bound my CF page to, any idea where in the dashboard it tells me which repo it takes from? Can't find it

Yongkie•2/20/25, 2:03 PM

Hi all, I'm trying the possibility to deploy a full stack Astro application with Pages+Functions+Supabase Auth. I created a folder <rootproject>/functions/auth/ containing signin.ts, signup.ts. In the documentation for local development, I can run

npx wrangler pages dev <DIRECTORY-OF-ASSETS>

npx wrangler pages dev <DIRECTORY-OF-ASSETS>

. Can someone explain what is this directory of assets? Is it the

dist

dist

folder created after running the command

astro build

astro build

? I tried

npx wrangler pages dev dist

npx wrangler pages dev dist

. The web app can be opened in the local browser, but trying the signup button returns

POST http://localhost:8788/auth/signup 405 (Method Not Allowed)

POST http://localhost:8788/auth/signup 405 (Method Not Allowed)

Dubz•2/20/25, 4:36 PM

So what exactly is "CIPA Filter" and when does it apply? Is that for not child safe sites or something? i.e. they may fall for scams, not appropriate/rated for them, etc.?

Erisa•2/20/25, 4:58 PM

the list of things included are here https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cybersafe/#configuration

Erisa•2/20/25, 4:58 PM

its supposed to be any websites you wouldnt want children viewing at school

EErisa its supposed to be any websites you wouldnt want children viewing at school

Dubz•2/20/25, 5:12 PM

Just school specifically or in general?

Dubz•2/20/25, 5:13 PM

I guess that makes it something a school district would use then?

DDubz Just school specifically or in general?

Erisa•2/20/25, 5:13 PM

CIPA is only mandated to be enforced within schools

DDubz I guess that makes it something a school district would use then?

Erisa•2/20/25, 5:13 PM

yes, thats exactly what its for

Dubz•2/20/25, 5:23 PM

ahhhh that makes sense

Dubz•2/20/25, 5:50 PM

someone really got that user and joined the server lmao

YYongkie Hi all, I'm trying the possibility to deploy a full stack Astro application with...

gruntlord6•2/20/25, 7:34 PM

I'd recommend using the astro starter for cf to get a feel for it, initially we just uploaded it as a static site with workers managing anything that needed interaction but we recently started deploying more advanced astro projects through ci/cid and that's been a lot smoother

gruntlord6•2/20/25, 7:35 PM

If someone more experienced has more to add then feel free, just figured I'd offer some base level advice

Zakko•2/20/25, 10:08 PM

Does anyone happen to know how long logs are stored when using a free plan of Pages? This is just information for the privacy policy, as right now it is just something akin to "log files are periodically wiped" which I think technically is enough, but GDPR to my knowledge recommends saying how long such stuff is stored. Although if stating it's periodically wiped is good enough then that's also fine

Walshy•2/20/25, 10:38 PM

I don't know if we have a number anywhere, if we do it'll be somewhere in here: https://www.cloudflare.com/en-gb/privacypolicy/

Brabmore•2/21/25, 1:54 AM

Hello I have been having issues with the captcha all day haven’t been able to to get it to work none of the day I’m useing the polgonscan on coin base please help

Brabmore•2/21/25, 1:54 AM

Please help

o7•2/21/25, 5:20 AM

Is smart placement not recommended for applications with globally spread databases?

e.g. traffic in Chicago convinces smart placement that ORD is the optimal colo to complete requests in, as there is a DB in Chicago awaiting writes...

Will traffic from California, be routed through the ORD worker?... considering there will also be a closer DB within California they will (by design) have to hit anyway

Or will smart placement eventually learn that California and Chicago traffic has to be specifically ran in different colos

jordan•2/21/25, 10:35 AM

is this (recreating my favorite parts of Firestore in DO) super dumb or potentially something worth exploring? i can't tell.. https://github.com/acoyfellow/blaze

if we think of a DO like a single "document"... is that crazy to think it's like a document with superpowers? what if a firestore document itself was a little server?

jordan•2/21/25, 10:35 AM

i want someone to tell me why this is idiotic to push futher lol

Jjordan is this (recreating my favorite parts of Firestore in DO) super dumb or potentia...

Hello, I’m Allie!•2/21/25, 10:38 AM

The biggest issue is scaling. Each Durable Object is single-threaded, which can limit the amount of tasks it can complete in a given amount of time. This is fine if the app is architected to spread load out across multiple documents, but becomes less ideal in the event that a developer attempts to use a single document to track global state

HHello, I’m Allie!The biggest issue is scaling. Each Durable Object is single-threaded, which can ...

jordan•2/21/25, 10:40 AM

that makes sense.. i was thinking about a global state being somewhere else, maybe not in a single DO (d1?) that then the DO's can sync to

Jjordan that makes sense.. i was thinking about a global state being somewhere else, may...

Hello, I’m Allie!•2/21/25, 10:40 AM

Yeah, that could work. You would just then need to highlight this to developers building on your system, who may not explicitly know about it

jordan•2/21/25, 10:44 AM

For sure. At this point it's much more of an exploration of architecture for some side projects / consulting gigs.

Ggruntlord6 I'd recommend using the astro starter for cf to get a feel for it, initially we ...

Yongkie•2/21/25, 11:13 AM

Thanks @gruntlord6 I'll try it

Tarunjot Singh•2/21/25, 11:17 AM

Hi Community,

I am facing an issue that my waf has been detecting a lot of traffic coming from IP that are actually Cloudflare IPs and I think this is because of the CDN. I want to know the details about it - what these IPs are exactly?, what is being done? and what should I do so that waf does not generate the alerts for this?

TTarunjot Singh Hi Community, I am facing an issue that my waf has been detecting a lot of traf...

Isaac McFadyen•2/21/25, 12:14 PM

This is likely users on Cloudflare WARP, which is Cloudflare's VPN-like service.

Isaac McFadyen•2/21/25, 12:15 PM

We'd need to know more details about which rule is triggering to know why they're being blocked.

Original message was deleted

Isaac McFadyen•2/21/25, 1:02 PM

Sites where you sign up to get money are absolutely scams, I'm afraid to say.

Isaac McFadyen•2/21/25, 1:03 PM

Unless you're actually doing work for the money then there's no reason they'd just give you money for free.

Anton•2/21/25, 1:03 PM

From what I can tell, CF's proxy does not recognize WebSocket ping/pong frames. It seems to consider

Similar Threads

Similar Threads

Similar Threads