CrowdSec•2mo ago

Testing Cloudflare Worker Bouncer on free plan

I am trying to test the Cloudflare worker bouncer on a free plan for now. But I can't even set up the infra. I can see the D1 Database and KVNS in Cloudflare Dashboard, but no workers. Yes I am using an "user"-token and I followed https://docs.crowdsec.net/u/bouncers/cloudflare-workers/#quick-guide--configuring-the-remediation-component-on-cloudflares-free-plan Any ideas?

CrowdSec Cloudflare Worker | CrowdSec

📚 Documentation

2 Replies

CrowdSec•2mo ago

Important Information

Thank you for getting in touch with your support request. To expedite a swift resolution, could you kindly provide the following information? Rest assured, we will respond promptly, and we greatly appreciate your patience. While you wait, please check the links below to see if this issue has been previously addressed. If you have managed to resolve it, please use run the command /resolve or press the green resolve button below.

Log Files

If you possess any log files that you believe could be beneficial, please include them at this time. By default, CrowdSec logs to /var/log/, where you will discover a corresponding log file for each component.

Guide Followed (CrowdSec Official)

If you have diligently followed one of our guides and hit a roadblock, please share the guide with us. This will help us assess if any adjustments are necessary to assist you further.

Screenshots

Please forward any screenshots depicting errors you encounter. Your visuals will provide us with a clear view of the issues you are facing.

StreilingerOP•2mo ago

INFO[0000] Using API key auth                           
INFO[0000] Cleaning up existing workers                  account="XXX"
DEBU[0000] Listing existing turnstile widgets            account="XXX"
TRAC[0001] widgets: []                                   account="XXX"
DEBU[0001] Done listing existing turnstile widgets       account="XXX"
DEBU[0001] Done cleaning up existing turnstile widgets   account="XXX"
DEBU[0001] Listing worker routes                         account="XXX" zone=XXX
TRAC[0002] routeResp: {Response:{Success:true Errors:[] Messages:[]} Routes:[]}  account="XXX" zone=XXX
DEBU[0002] Done listing worker routes                    account="XXX" zone=XXX
DEBU[0002] Listing worker routes                         account="XXX" zone=XXX
TRAC[0003] routeResp: {Response:{Success:true Errors:[] Messages:[]} Routes:[]}  account="XXX" zone=XXX
DEBU[0003] Done listing worker routes                    account="XXX" zone=XXX
DEBU[0003] Attempting to delete worker script crowdsec-cloudflare-worker-bouncer  account="XXX"
DEBU[0004] Received error while deleting worker script crowdsec-cloudflare-worker-bouncer: This Worker does not exist on your account. (10007) (type: *cloudflare.NotFoundError)  account="XXX"
DEBU[0004] Didn't find worker script crowdsec-cloudflare-worker-bouncer  account="XXX"
DEBU[0004] Listing worker KV Namespaces                  account="XXX"
TRAC[0004] kvNamespaces: [{ID:XXX Title:CROWDSECCFBOUNCERNS}]  account="XXX"
DEBU[0004] Done listing worker KV Namespaces             account="XXX"
DEBU[0004] Deleting worker KV Namespace with ID XXX  account="XXX"
DEBU[0006] Done deleting worker KV Namespace with ID XXX  account="XXX"

INFO[0000] Using API key auth                           
INFO[0000] Cleaning up existing workers                  account="XXX"
DEBU[0000] Listing existing turnstile widgets            account="XXX"
TRAC[0001] widgets: []                                   account="XXX"
DEBU[0001] Done listing existing turnstile widgets       account="XXX"
DEBU[0001] Done cleaning up existing turnstile widgets   account="XXX"
DEBU[0001] Listing worker routes                         account="XXX" zone=XXX
TRAC[0002] routeResp: {Response:{Success:true Errors:[] Messages:[]} Routes:[]}  account="XXX" zone=XXX
DEBU[0002] Done listing worker routes                    account="XXX" zone=XXX
DEBU[0002] Listing worker routes                         account="XXX" zone=XXX
TRAC[0003] routeResp: {Response:{Success:true Errors:[] Messages:[]} Routes:[]}  account="XXX" zone=XXX
DEBU[0003] Done listing worker routes                    account="XXX" zone=XXX
DEBU[0003] Attempting to delete worker script crowdsec-cloudflare-worker-bouncer  account="XXX"
DEBU[0004] Received error while deleting worker script crowdsec-cloudflare-worker-bouncer: This Worker does not exist on your account. (10007) (type: *cloudflare.NotFoundError)  account="XXX"
DEBU[0004] Didn't find worker script crowdsec-cloudflare-worker-bouncer  account="XXX"
DEBU[0004] Listing worker KV Namespaces                  account="XXX"
TRAC[0004] kvNamespaces: [{ID:XXX Title:CROWDSECCFBOUNCERNS}]  account="XXX"
DEBU[0004] Done listing worker KV Namespaces             account="XXX"
DEBU[0004] Deleting worker KV Namespace with ID XXX  account="XXX"
DEBU[0006] Done deleting worker KV Namespace with ID XXX  account="XXX"

DEBU[0006] Listing D1 DBs                                account="XXX"
TRAC[0007] dbs: [{Name:CROWDSECCFBOUNCERDB NumTables:0 UUID:XXX-XXX-XXX-XXX Version:production CreatedAt:2025-10-29 14:48:19.46 +0000 UTC FileSize:20480}]  account="XXX"
DEBU[0007] Checking D1 DB CROWDSECCFBOUNCERDB vs CROWDSECCFBOUNCERDB  account="XXX"
DEBU[0007] Deleting D1 DB XXX-XXX-XXX-XXX-XXX  account="XXX"
DEBU[0008] Deleted D1 DB XXX-XXX-XXX-XXX-XXX  account="XXX"
INFO[0008] Done cleaning up existing workers             account="XXX"
INFO[0008] Creating KVNS CROWDSECCFBOUNCERNS             account="XXX"
TRAC[0009] KVNS: {Response:{Success:true Errors:[] Messages:[]} Result:{ID:XXX Title:CROWDSECCFBOUNCERNS}}  account="XXX"
INFO[0009] Creating D1 Database for metrics              account="XXX"
FATA[0019] unable to deploy infra: error while writing ban template to KV: exceeded available rate limit retries for account XXX

DEBU[0006] Listing D1 DBs                                account="XXX"
TRAC[0007] dbs: [{Name:CROWDSECCFBOUNCERDB NumTables:0 UUID:XXX-XXX-XXX-XXX Version:production CreatedAt:2025-10-29 14:48:19.46 +0000 UTC FileSize:20480}]  account="XXX"
DEBU[0007] Checking D1 DB CROWDSECCFBOUNCERDB vs CROWDSECCFBOUNCERDB  account="XXX"
DEBU[0007] Deleting D1 DB XXX-XXX-XXX-XXX-XXX  account="XXX"
DEBU[0008] Deleted D1 DB XXX-XXX-XXX-XXX-XXX  account="XXX"
INFO[0008] Done cleaning up existing workers             account="XXX"
INFO[0008] Creating KVNS CROWDSECCFBOUNCERNS             account="XXX"
TRAC[0009] KVNS: {Response:{Success:true Errors:[] Messages:[]} Result:{ID:XXX Title:CROWDSECCFBOUNCERNS}}  account="XXX"
INFO[0009] Creating D1 Database for metrics              account="XXX"
FATA[0019] unable to deploy infra: error while writing ban template to KV: exceeded available rate limit retries for account XXX

Looks like the initial setup chewed up the rate limit. It worked ob day two. However we're noticing somehting else: The worker-bouncer seems to break Google Workspace authentication for Cloudflare applications. As soon as the worker is active - authentication via Google on the route breaks with "Too many redirects".

Gaming

Programming

Testing Cloudflare Worker Bouncer on free plan

Did you find this page helpful?