Is that screenshot recently?

If UAM is truly on and you are bypassing it (i.e. not completing the captcha and somehow visiting the origin server directly without getting it's IP), then yes that would be classified as a vulnerability.

Zzegevlier Is that screenshot recently?

Salamus•2/9/22, 2:34 PM

1 minute before sending lol

brettski•2/9/22, 2:35 PM

Which channel should I ask a question about CloudFlare Web Analytics?

Bbrettski Which channel should I ask a question about CloudFlare Web Analytics?

James•2/9/22, 2:44 PM

Here is good

brettski•2/9/22, 2:49 PM

LCP question in Web Analytics

brettski•2/9/22, 2:50 PM

hmm, seems odd I can't make a thread. ok

brettski•2/9/22, 2:51 PM

I am trying to understand long LCP times in the Web Analytics data we receive for our site. We have SVG images which are stored in a GCP bucket with 5kms LCP times. This seems pretty long for a service with a regular latency of ~150ms. The SVGs are small, ~13k, is it perhaps the render time which is in this number? One area confusing me is that the object section show the size to be 439k, I am not sure where this number is coming from. I have a screen shot, though didn't want it to take up much of the main #general-discussions thread space

vishvish•2/9/22, 3:26 PM

but the argo tunnel does not work properly

Vvishvish but the argo tunnel does not work properly

Isaac McFadyen•2/9/22, 3:26 PM

What exactly isn't working?

vishvish•2/9/22, 3:30 PM

the tunnel connects and it works on quick dns --- but on multiple host i am getting no connection

Vvishvish the tunnel connects and it works on quick dns --- but on multiple host i am gett...

Isaac McFadyen•2/9/22, 3:30 PM

Can you send any logs?

vishvish•2/9/22, 3:31 PM

root@ip-172-31-53-236:/home/ubuntu# cloudflared tunnel --config ~/root/.cloudflared/config.yaml run vboxtest
2022-02-08T23:09:11Z INF Starting tunnel tunnelID=
2022-02-08T23:09:11Z INF Cannot determine default configuration path. No file [config.yml config.yaml] in [~/.cloudflared ~/.Cloudflare-warp ~/Cloudflare-warp /etc/cloudflar
ed /usr/local/etc/cloudflared]
2022-02-08T23:09:11Z INF Version 2022.1.3
2022-02-08T23:09:11Z INF GOOS: linux, GOVersion: go1.17.5, GoArch: amd64
2022-02-08T23:09:11Z INF Settings: map[config:/root/root/.cloudflared/config.yaml]
2022-02-08T23:09:11Z INF Generated Connector ID: 4f21bb2f-dec2-4d46-8a7a-55dc86b85c0c
2022-02-08T23:09:11Z INF Initial protocol http2
2022-02-08T23:09:11Z INF cloudflared will not automatically update if installed by a package manager.
2022-02-08T23:09:11Z INF Starting metrics server on 127.0.0.1:37883/metrics
2022-02-08T23:09:11Z WRN Your version 2022.1.3 is outdated. We recommend upgrading it to 2022.2.0
2022-02-08T23:09:11Z INF Connection e6fdc6fc-7692-4e78-b1af-68b1916ab8e6 registered connIndex=0 location=IAD
2022-02-08T23:09:12Z INF Connection 07a37ec1-a4f4-474c-8f4a-226463bc44ca registered connIndex=1 location=IAD
2022-02-08T23:09:12Z INF Connection 7ce80b7f-793d-4bb8-bb2b-e45fe40126c6 registered connIndex=2 location=IAD
2022-02-08T23:09:14Z INF Connection 77efaf42-6a2c-43a5-9f0a-7dca137096dc registered connIndex=3 location=IAD

vishvish•2/9/22, 3:31 PM

i remove the tunnel id

Isaac McFadyen•2/9/22, 3:31 PM

Ok, so the problem is your config file. See on line 3 where it says there's no config file found?

vishvish•2/9/22, 3:32 PM

2022-02-08T23:18:36Z ERR error=“Unable to reach the origin service. The service may
be down or it may not be responding to traffic from cloudflared: dial tcp 127.0.0.1:8
080: connect: connection refused” cfRay=6da893fc4ae00329-MIA originService=http://loc
alhost:8080

vishvish•2/9/22, 3:32 PM

where should i put the config file

vishvish•2/9/22, 3:32 PM

and how should i call it

Isaac McFadyen•2/9/22, 3:33 PM

Ok. So first, those first logs say that there's no config file. You can follow the guide here: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide

Isaac McFadyen•2/9/22, 3:33 PM

Second is that your service that you are trying to expose,

127.0.0.1:8080

127.0.0.1:8080

is not responding. You'll want to check why that is.

vishvish•2/9/22, 3:34 PM

this is my config ...tunnel: TUNNEL ID
credentials-file: /root/.cloudflared/vboxtest.json
ingress:

hostname: vtest1.vboxsystems.com
service: http://localhost:80
hostname: vtest2.vboxsystems.com
service: http://localhost:81
service: http_status:404

Isaac McFadyen•2/9/22, 3:34 PM

Ok, where is it located?

vishvish•2/9/22, 3:34 PM

and its saved /root/.cloudflared/config.yaml

Isaac McFadyen•2/9/22, 3:35 PM

Ok, so then your problem is with the run command. See the

character that is at the front of the

--config

--config

flag? You'll want to get rid of it so that it becomes

/root/.cloudflared/config.yaml

/root/.cloudflared/config.yaml

vishvish•2/9/22, 3:36 PM

this is the command loudflared tunnel --config ~/root/.cloudflared/config.yaml run vboxtest

Isaac McFadyen•2/9/22, 3:36 PM

Yeah, so it should be changed to

cloudflared tunnel --config /root/.cloudflared/config.yaml run vboxtest

cloudflared tunnel --config /root/.cloudflared/config.yaml run vboxtest

Isaac McFadyen•2/9/22, 3:37 PM

(Notice how I removed the

)

vishvish•2/9/22, 3:37 PM

without the ~ it cant find the path

Isaac McFadyen•2/9/22, 3:38 PM

Ok, then make sure your config file is actually in that path. The

is adding your user's home directory to the path which you don't want.

Isaac McFadyen•2/9/22, 3:38 PM

If you're still unsure see what

cat /root/.cloudflared/config.yaml

cat /root/.cloudflared/config.yaml

says.

vishvish•2/9/22, 3:38 PM

the file is there i double check and tripple check can cat and vi it without ~

Isaac McFadyen•2/9/22, 3:39 PM

Ok... which user are you running cloudflared with?

vishvish•2/9/22, 3:39 PM

sudo

Isaac McFadyen•2/9/22, 3:39 PM

Ok, can you give the exact logs of what it says when it can't find the path?

vishvish•2/9/22, 3:40 PM

where would i find that

Vvishvish where would i find that

Isaac McFadyen•2/9/22, 3:41 PM

So when you run

cloudflared tunnel --config /root/.cloudflared/config.yaml run vboxtest

cloudflared tunnel --config /root/.cloudflared/config.yaml run vboxtest

without the

what does it say?

vishvish•2/9/22, 3:42 PM

error parsing YAML in config file at /root/.cloudflared/config.yaml: yaml: line 5: mapping values are not allowed in this context

Vvishvish error parsing YAML in config file at /root/.cloudflared/config.yaml: yaml: line ...

Isaac McFadyen•2/9/22, 3:44 PM

Ok, so then there's something wrong with the formatting of your config file. Can you double-check that it matches this example with formatting?

tunnel: ID
credentials-file: CREDENTIALS_FILE

ingress:
  - hostname: test.example.com
    service: http://localhost:80
  - hostname: test-ssh.example.com
    service: ssh://localhost:22
  - service: http_status:404

tunnel: ID
credentials-file: CREDENTIALS_FILE

ingress:
  - hostname: test.example.com
    service: http://localhost:80
  - hostname: test-ssh.example.com
    service: ssh://localhost:22
  - service: http_status:404

Isaac McFadyen•2/9/22, 3:44 PM

Specifically, check line 5 of yours for errors.

vishvish•2/9/22, 3:45 PM

tunnel: I REMOVE THE TUNNEL ID
credentials-file: /root/.cloudflared/vboxtest.json

ingress:

hostname: vtest1.vboxsystems.com
service: http://localhost:80
hostname: vtest2.vboxsystems.com
service: http://localhost:81
service: http_status:404

vishvish•2/9/22, 3:46 PM

the / are not there at the end

vishvish•2/9/22, 3:46 PM

lol

Isaac McFadyen•2/9/22, 3:46 PM

That's your problem. Your indenting is not correct, it should be:

tunnel:  I REMOVE THE TUNNEL ID
credentials-file: /root/.cloudflared/vboxtest.json

ingress:
  - hostname: vtest1.vboxsystems.com
    service: http://localhost:80
  - hostname: vtest2.vboxsystems.com
    service: http://localhost:81
  - service: http_status:404

tunnel:  I REMOVE THE TUNNEL ID
credentials-file: /root/.cloudflared/vboxtest.json

ingress:
  - hostname: vtest1.vboxsystems.com
    service: http://localhost:80
  - hostname: vtest2.vboxsystems.com
    service: http://localhost:81
  - service: http_status:404

vishvish•2/9/22, 3:49 PM

yes you are correct

vishvish•2/9/22, 3:50 PM

you dan man

Vvishvish you dan man

Isaac McFadyen•2/9/22, 3:51 PM

Thanks, happy I could help.

vishvish•2/9/22, 3:51 PM

now how do i add this as a service

Isaac McFadyen•2/9/22, 3:51 PM

https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/run-tunnel/run-as-service

vishvish•2/9/22, 3:53 PM

Nice

tunnel: ID credentials-file: CREDENTIALS_FILE ingress: - hostname: test.example.com service: http://localhost:80 - hostname: test-ssh.example.com service: ssh://localhost:22 - service: http_status:404

tunnel: I REMOVE THE TUNNEL ID credentials-file: /root/.cloudflared/vboxtest.json ingress: - hostname: vtest1.vboxsystems.com service: http://localhost:80 - hostname: vtest2.vboxsystems.com service: http://localhost:81 - service: http_status:404

Is that screenshot recently?

Similar Threads

Similar Threads

Similar Threads