Cloudflare Developers

CD

Cloudflare Developers

Welcome to the official Cloudflare Developers server. Here you can ask for help and stay updated with the latest news

Join

TRIP-WAF-20220206 - rule triggering issue

Hi WAF Support team... I have a question about a firewall rule which is triggering a block on our app. This rule is triggering: PHP, jQuery File Upload - Code Injection, Dangerous File Upload - CVE:CVE-2018-9206, CVE:CVE-2019-17132 Questions...

Pro and above can configure custom WAF

Pro and above can configure custom WAF Block Pages (custom pages for ip/country block, waf block, managed challenge, legacy captcha challenge, country challenge, JS challenge) under Custom Pages of a zone, or account-wide in Configurations => Custom Pages

You can disable AAAA records for your

You can disable AAAA records for your entire zone by modifying the IPv6 Compatibility Setting via the API (not possible to modify in the dash), but not for specific records on your zone.

I/O error cloudflare

So this is because you're using the global scope (i.e, you're putting the request from one request in a global variable and then accessing it from a different request)

Cloudflare s proxy is only for HTTP

Cloudflare's proxy is only for HTTP Traffic. They're not assigning you a Unique IP or anything, so without something like Cloudflare Spectrum they'd have no way to tell what arbitary tcp traffic is for your zone vs someone elses. You could use Arbitrary TCP w/ cloudflared: https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/ Would basically boil down to you installing cloudflared on the client machine and using something like cloudflared access tcp --hostname tcp.site.com --url localhost:3306...

It looks like they did add support but

It looks like they did add support but you need to force it to connect over IPv6, via the --edge-ip-version argument
--edge-ip-version value Cloudflare Edge ip address version to connect with. {4, 6, auto} (default: "4") [$TUNNEL_EDGE_IP_VERSION]
--edge-ip-version value Cloudflare Edge ip address version to connect with. {4, 6, auto} (default: "4") [$TUNNEL_EDGE_IP_VERSION]
...

Ideas for Cloudflare Developer Platform

Ok people.. In the completely hypothetical scenario that I am currently editing a document with the top asks for the Cloudflare Developer Platform in 2023.. what would you say they are? Now some rules, I am going to be creating a thread and only post in there. One post per item and one item per post. Read through the previous entries to see if someone mentioned your thing already and put an emoji on them instead of creating a new one. Go!...

is it possible to change location with

is it possible to change location with Zero Trust?

Hello folks I m having trouble getting a

Hello folks, I'm having trouble getting a subdomain to redirect to a subdirectory. I'm sorry if this is a noob question. I have account.mastersofscale.com as a CNAME, pointing to some outdated server that I do not control. I want it to point to the same server that handles https://mastersofscale.com -- more specifically, to https://mastersofscale.com/my-account When I redirect, I need to capture the query string so things like $_GET variables still work....

QUIC , ECH & TLSv1.3 parallelism

I had some question regarding QUIC / ECH, which could also be browser (firefox) dependent. I will make a thread to not clutter general

which change every 30 secs

which change every 30 secs like the best would be email + password + TOTP...

Not sure where to best report the

Not sure where to best report; the recently posted video about developer week ( https://cloudflare.tv/event/raWPn6Zm) doesn't load for me. The link to the stream site seems to point to a "null" reference. Here's a snippet from the page metadata: "metadata":{"fileName":"dev week hero 2.jpg"}},"id":"O3vVD0Zq","title":"Developer Week","titleSlug":"developer-week","url":null},"thumbnail":{"$type":"Asset","url":"/img/open-graph.png"},"thumbnailTimestamp":null,"videoId":null,"live":true,

SSL Apache

But surely it's a conflict between my vhost config on apache and CF

Oh Well thats exciting

Oh! Well thats exciting

Web Analytics CSP

@James cybermon.uk is my domain and I get the beacon.min.js cannot be run due to my CSP but if you are using nonces which I am it should run but its not due to want to run inline which is bad even though I have this in my hugo theme https://github.com/L1ghtn1ng/hugo-theme-hello-friend-ng-cloudflare/blob/master/layouts/partials/javascript.html#L13

Status Worker

yes, or it wont be a secret and will be overwritten when you publish

Via the terminal with `sudo cscli

Via the terminal with sudo cscli decisions add -i 173.80.198.81 -R http -d 20m

Unable to reach the origin service

2022-10-12T16:59:09Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: dial tcp [::1]:80: connect: connection refused" connIndex=0 dest=https://cloud.website.org/favicon.ico ip=198.41.200.63 type=http
2022-10-12T16:59:09Z ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: dial tcp [::1]:80: connect: connection refused" connIndex=0 dest=https://cloud.website.org/favicon.ico ip=198.41.200.63 type=http
...

Dawn Parzych2809 could you check this

@Dawn Parzych could you check this?

```

``` curl --request PATCH 'https://api.cloudflare.com/client/v4/accounts/:account_id/pages/projects/:project_name' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data-raw '{...