Uploadthing IP addresses & Vercel bot protection
I’m currently using Vercel’s bot protection, which prevents requests from outside my app. Unfortunately, Uploadthing isn’t listed in the verified bot list (https://vercel.com/docs/bot-management#verified-bots). It would be beneficial for you to register with the submission form in the Vercel bot management documentation so Uploadthing callbacks can bypass Vercel protectin.
For me the temporary solution is to add WAF rules to bypass protection, and I’m curious if Uploadthing has a similar list of IPs, similar to how Stripe does (https://docs.stripe.com/ips). Should I let the /api/uploadthing request bypass the rules or is there a better solution?
Bot Management
Learn how to manage bot traffic to your site.
1 Reply
I just found out about the headers which will solve the problem. However it would still be great to fill the form on the vercel bot management page to get verified