Cloudflare Developers

CD

Cloudflare Developers

Welcome to the official Cloudflare Developers server. Here you can ask for help and stay updated with the latest news

Join

Can you expose an application to the Internet by cloudflare without TLS termination?

The TLS is typically terminated at Cloudflare servers . This means that CF decrypts the traffic, scans it and re-encrypted it to origin server. I want the traffic to be end to end encrypted from client to the origin server. This requires TLS pass-through. I want to enforce ACLs at cloudflare as much as possible. For example, IP filtering should be easily doable, but also forwarding client certificate. Another workaround would be that client authenticates to Cloudflare through some kind of SSO. If authentication is successful, client obtains a token from CF, and then establishes a direct TLS connection with the origin server ....

IDN Domain validation error due to virus_total

I have two domains pointing to the same server (savevader.se and säveväder.se (actually xn--svevder-5wad.se)), the second one contains the "correct" Swedish spelling. They have until recently (~1 month) functioned equally well. The virus total scanner has some time in the past few weeks decided that the IDN domain is potentially malicious. This results in the cloudflare certificate validation failing and the domain not being accessible. I am not sure what I can do to resume the function of that...
No description

Pages triggering error 502 - cloudflare bad gateway

On some pages in my ecommerce, users are reporting that they are experiencing the Cloudflare bad gateway error, would anyone know what it could be? PS: my pm2 and my server nginx are running normally....
No description

How to test my Rate Limiter (typescript) locally

Hey, I was wondering if you have any documentation on how to test my Rate Limiter implementation locally with the worker I created. I am using miniflare, but I don't see an option to enable the Rate Limiter there. Thank you!

Cloudflare + Hubspot - Errors

I am getting a “Missing record” Error for my DNS records relating to Hubspot. I created TXT record types for each DNS record, updated the Host and entered the required data. However I am still getting “Record not found” messages for each DNS. What do I need to do to fix this?

CloudFlare Zero Trust GUI don´t open in Ubuntu 24.04.1 LTS

install Cloudflare Zero Trust following the guide https://pkg.cloudflareclient.com/#ubuntu the installation finishes correctly, and I see the icon added to the apps but when I open it nothing happens, the icon does not appear in the top bar either, when I run the app per terminal works, but the GUI doesn't, anyone with the same problem?
No description

Email not working, outlook not able to see MX or autodiscover CNAME row

We're able to send emails, just can't receive them. MXlookup is seeing MX

Cloudflare DNS Setup Complete, But Domain Still Inactive

Hi, I have completed the necessary DNS settings on my server. The WHOIS shows that the name server is Cloudflare, but my domain still isn't becoming active on Cloudflare. My domain: prevencioskozpont.hu...

Cloudflare Zero Trust Tunnel stopped working

Hi guys, I'm not aware of any changes but for some reason my Cloudflare tunnel hosted in a docker in Unraid is just throwing errors like that. Can someone help me with that? I have no idea how to solve that. Thank you so much ...
No description

Bug with a cloudflare server

A user cannot access my website. Their IP is completely blocked by 172.67.173.224. All connection requests/ICMP result in timeouts

Custom Hostnames (CF for SaaS) - some domains 522

Hi All, We have custom hostnames enabled for a zone (docs.page), and have added a number of custom hostnames to test. All hostnames are verified (green certificate status + hostname status). These hostnames are supposed to connect to a cloudflare worker, which is routed via the DNS record (this is setup)....

SSL on my VPS with SSL certificate from CF

How do I automatically renew the certificate issued by CF on my VPS? Does it even need to be the same?...

Connecting Two Servers with zero-trust

I have successfully implemented zero trust using Cloudflare Tunnel for a server without a public IP address. Now, I'd like to connect two servers in a zero-trust manner without using a domain. My setup: Server 1: Public IP...

Rocket Loader with CSP headers breaks require js on Magento

Hello, CF community, we have a Magento site with a Rocket loader feature. After deploying CSP headers we got an error - require is not defined. If we disable the rocket loader the issue is dissapear. I want to mention that we've added CSP header script-src 'self' ajax.cloudflare.com; as mentioned in the CF docs https://developers.cloudflare.com/fundamentals/reference/policies-compliances/content-security-policies/#product-requirements What can you suggest to resolve the issue? I really appreciate any help you can provide....

Locally managed CF tunnels and DNS

Hi I'm trying to set up a server that can create embedded linux images with CF tunnels to host a website from each device. What I'm currently doing is using go-API to create the credentials and installing it on the image - that works flawlessly. Now I'm looking into the DNS side of this, and each unit requires a dedicated DNS record to proxy to cfargotunnel.com which causes DNS propagation issues. Can I do this with a single DNS record or at my server side? xxxx.example.com -> xxxx.cfargotunnel.com or example.com/xxxx -> xxxx.cfargotunnel.com....

Cloudflare for SaaS: How to support customers whose domains are managed by non cloudflare dns manage

I am planning to use Cloudflare for SaaS to build a platform where my customers can point their non cloudflare managed domains to a subdomain on my cloudflare managed domain. Example mydomain.com on cloudflare...

Block AI Scrapers and Crawlers Feedback

I apologize ahead of time if this goes in a different area. I have spent the better of 6-8 hours trying to figure out why all of a sudden I could no longer use my openID sign in for Proxmox. I updated proxmox, authelia, rebooted everything, crawled through logs left and right. I finally happened to click on one of the suggestions listed on the Overview page about activating the new Block AI Scrapers and Crawlers option and remembered that I had recently activated that, just about 6-8 hours ago. I turned it off and BAM, now my OpenID sign in is working again. TL;DR: The new Block AI Scrapers and Crawlers option was giving a 500 error when attempting to use OpenID authentication on Proxmox....
Solution:
That last sentence I sent gave me an idea. I changed the Allow to skip the remaining rules and moved it to here. Now everything seems to still be working. I can't believe I missed that yesterday.
No description

I bought a domain on cloudflare but there is no option to register the hosting name servers

I bought a domain on Cloudflare but there is no option to register my ionos hosting nameservers on cloudflare. I investigated and they say that you have to register a type A record with the IP of the website. But in ionos hosting there is only one IP for all websites....

SSL/TLS on my newly transferred domain

I am having an issue where I can’t access the SSL/TLS page on my domain it says loading for a bit, then it says we are experiencing technical difficulties, and it is only this tab that is doing this. I just recently transferred my domain from another provider and would like to setup certificates for my domain.

Any way to opt a subdomain back in to Total TLS

I have Total TLS enabled on my account and had one of the subdomains get stuck validating for a while. I then deleted the cert and DNS record and re-added the DNS record, assuming it would attempt to make a cert using the Total TLS again. I wasn't aware of the warning about assumed opt-out in https://developers.cloudflare.com/ssl/edge-certificates/additional-options/total-tls/. The guide doesn't provide any means of opting back in. Is there a way of doing so? Perhaps by updating something via on...