Cloudflare Developers•9mo ago

thanks! I figured out that this is the correct way to protect all workers.dev stuff.

Ddave thanks! I figured out that this is the correct way to protect all workers.dev st...

daveOP•4/3/25, 7:56 PM

@FloppyDisk This won't impact Cron Workers or any service bindings, right?

daveOP•4/3/25, 7:59 PM

seems to be working

daveOP•4/3/25, 8:00 PM

ya no impact

EErisa .pages.dev are special-cased as being treated as a single "domain" so you can ju...

daveOP•4/3/25, 8:03 PM

Can't use *.pages.dev*.pages.dev.

Erisa•4/3/25, 8:04 PM

mmmm that makes sense but also sucks

EErisa .pages.dev are special-cased as being treated as a single "domain" so you can ju...

daveOP•4/3/25, 8:10 PM

It looks like I need two hostnames for each project. One for *.demo.pages.dev*.demo.pages.dev and one for demo.pages.devdemo.pages.dev.

daveOP•4/3/25, 8:10 PM

Just doing *.demo.pages.dev*.demo.pages.dev doesn't match demo.pages.devdemo.pages.dev.

Erisa•4/3/25, 8:13 PM

hmmm yes, youre right

daveOP•4/3/25, 8:14 PM

hold on, I think I might be able to do this with a redirect trick on the account level

daveOP•4/3/25, 8:15 PM

https://developers.cloudflare.com/rules/url-forwarding/bulk-redirects/concepts/#url-redirects

daveOP•4/3/25, 8:15 PM

darn it

daveOP•4/3/25, 8:20 PM

With this configuration and Includes subdomains enabled, incoming requests to http://a.example.com/about and http://a.b.example.com/about would also match, in addition to the specified domain with no subdomain (https://example.com/about).

daveOP•4/3/25, 8:24 PM

ah ha!!

daveOP•4/3/25, 8:24 PM

It worked!

daveOP•4/3/25, 8:24 PM

This bulk redirect list rule effectively "blocks" all usage of

pages.dev

pages.dev

from what I can tell.

Ddave This bulk redirect list rule effectively "blocks" all usage of `pages.dev` from ...

daveOP•4/3/25, 8:28 PM

https://github.com/cloudflare/cloudflare-docs/issues/14839

Also documented here.

GitHub

Please document how to redirect all `*.pages.dev` domains in accoun...

Existing documentation URL(s) https://developers.cloudflare.com/pages/how-to/redirect-to-custom-domain/ What changes are you suggesting? I found a really nice trick for redirecting (effectively dis...

harryphilip1275•4/3/25, 8:54 PM

As soon as I change over to cloudflare and assign there name servers, my website stops working and has a message that says too many redirects, how do I fix that ?

daveOP•4/3/25, 9:03 PM

Is it possible to have Cloudflare Access act as a OAuth server for incoming requests from things like AWS EventBridge (API Connections)?

harryphilip1275•4/3/25, 9:16 PM

Cloudflare is so unreliable most times the nslookup gets the incorrect IP for teh website and occasionally it gets the right one

Hharryphilip1275 Cloudflare is so unreliable most times the nslookup gets the incorrect IP for t...

Hard@Work•4/3/25, 9:23 PM

What do you mean "the right one"?

Peps•4/3/25, 9:26 PM

it probably has nothing to do with you getting the 'incorrect ip', as you probably have Cloudflare's proxy enabled for your records, so you'll see CF's ip instead of your server as CF will act as a middleman

Peps•4/3/25, 9:27 PM

as for the 'too many redirects' error, make sure that the SSL mode on the Cloudflare dashboard is set to Full (Strict)Full (Strict) and that you have a valid SSL certificate installed on your webserver

Peps•4/3/25, 9:28 PM

Cloudflare has plenty of documentation to troubleshoot these very common errors, for example: https://developers.cloudflare.com/ssl/troubleshooting/too-many-redirects/

Zenith•4/3/25, 9:49 PM

hey, is there a way i can make my pages functions fail closed?

Zenith•4/3/25, 9:50 PM

in case of usage related failures

Payne•4/3/25, 9:52 PM

I have cloudflare Warp+ on my android device. I noticed there is a key with my ID in settings. I tried copying that key and pasting it on my cloudflare Warp application on MacOS but for some reason, I get "Invalid Key" error. Is it because WARP+ is not available on MacOS?

PPeps it probably has nothing to do with you getting the 'incorrect ip', as you probab...

harryphilip1275•4/3/25, 10:32 PM

Must I turn off the proxy ? Yes I have valid SSLs

Hharryphilip1275 Must I turn off the proxy ? Yes I have valid SSLs

Peps•4/3/25, 10:32 PM

if you have a valid SSL cert then you just have to switch the SSL mode to be full (strict)full (strict), at the SSL settings on the dashboard

PPeps if you have a valid SSL cert then you just have to switch the SSL mode to be `fu...

harryphilip1275•4/3/25, 10:38 PM

And the proxy on the A records ? Must I change those and turn off proxies ? it doesnt let me change SSL to strict as its only for Enterprise customers , when I turn off Proxies there is a recommendation to turn on proxies otherwise it exposes my IP but if it doesnt work then there is no point in cloudflare, this is 2nd time I have tried it and both times my website stopped working so now I am very leary of Cloudflare

Hharryphilip1275 And the proxy on the A records ? Must I change those and turn off proxies ? it...

Peps•4/3/25, 10:39 PM

ah right forgot strict is for ENT only, in that case regular

Full

Full

is fine.
You can leave proxy on, as you mentioned your SSL certs are correct. Just be aware that the ips you see when doing nslookup won't be yours, as that's expected.

PPeps ah right forgot strict is for ENT only, in that case regular `Full` is fine. You...

harryphilip1275•4/3/25, 10:41 PM

But then the site doesnt work , so now I have lost confidence in cloudflare I have tried this twice and both times my site stopped working so had ot revert back to my original nameservers and thne it worked again

Walshy•4/3/25, 10:42 PM

full strict isn't ent, origin-pull is ent only

Hharryphilip1275 But then the site doesnt work , so now I have lost confidence in cloudflare I ha...

Peps•4/3/25, 10:42 PM

then the site doesnt work

Can you elaborate on that?

harryphilip1275•4/3/25, 10:43 PM

so changing it to full will makeit work again ? I am skeptical I went back to my previous nameservers and paused Cloudflare and then the site worked again

harryphilip1275•4/3/25, 10:43 PM

its gets a message too many redirects

Peps•4/3/25, 10:43 PM

That's because your ssl mode was likely set to FlexibleFlexible at the time

harryphilip1275•4/3/25, 10:44 PM

and nslookup doesnt get the correct IP only very occasionally does it get the correct IP of my site

Peps•4/3/25, 10:44 PM

also I don't recommend switching between nameservers multiple times if you're actively troubleshooting issues, as it takes up to 24 hours (but usually about a hour) for the new nameserver to take effect

harryphilip1275•4/3/25, 10:44 PM

how does SSL set to flexible make it get incorrect IP ?

harryphilip1275•4/3/25, 10:45 PM

well how does one do this without switching I couldnt leave my site not working ? can I use Cloudflare without changing to their nameservers ?

Peps•4/3/25, 10:45 PM

At this point it's probably best to create a thread at #general-help and continue there, as this channel isn't quite meant for long-running troubleshooting sessions

harryphilip1275•4/3/25, 10:46 PM

at this point I am giving up I think spent too much time on soemthing that doesnt work

Peps•4/3/25, 10:46 PM

That's fine. We gave you multiple solutions but you didn't try them, so unfortunately we can't help you further then

harryphilip1275•4/3/25, 10:47 PM

how can I try them without switching to cloudflares nameservers ?

harryphilip1275•4/3/25, 10:47 PM

what multiple solutions all you said was to switch from flexible to full

Hharryphilip1275 and nslookup doesnt get the correct IP only very occasionally does it get the ...

Walshy•4/3/25, 10:48 PM

Define correct IP

Walshy•4/3/25, 10:48 PM

You're proxying so you won't get an origin IP without disabling proxying

harryphilip1275•4/3/25, 10:48 PM

the IP of the website

thanks! I figured out that this is the correct way to protect all workers.dev stuff.

Similar Threads

Similar Threads

Similar Threads