musicman123 — FJLaboratories
musicman123 — FJLaboratories
PostsComments
CDCloudflare Developers
Created by musicman123 — FJLaboratories on 2/23/2024 in #workers-help
Some requests blocked by WAF?
My site is behaving super weirdly recently. It appears that some WAF is blocking a huge amount of workers traffic on specific images. As background, my site is using Workers to retreive an image from R2 and apply Image Resizing to it based on certain query parameters. My site is a CF Pages site as well, with the worker being on a subdomain route. Certain images are being blocked - the exact urls are: 
https://images.fjlaboratories.com/?image=/feature-images/ENGStudio%20Hotswap%20Render%20-%201.jpg&w=1920&q=60
https://images.fjlaboratories.com/?image=/feature-images/DSCF2025.jpeg&w=1920&q=60
https://images.fjlaboratories.com/?image=/feature-images/PXL_20211118_071706779_preview.jpg&w=1920&q=60
...
https://images.fjlaboratories.com/?image=/feature-images/ENGStudio%20Hotswap%20Render%20-%201.jpg&w=1920&q=60
https://images.fjlaboratories.com/?image=/feature-images/DSCF2025.jpeg&w=1920&q=60
https://images.fjlaboratories.com/?image=/feature-images/PXL_20211118_071706779_preview.jpg&w=1920&q=60
...
HOWEVER, if we change the q=60 into any other value, it becomes accessible again. I'm also only having trouble with some images... I've turned off all WAF Managed Rules, set Site Security to "Essentially Off" and confirmed no other rules under "Security" are in effect.
16 replies
CDCloudflare Developers
Created by musicman123 — FJLaboratories on 1/11/2024 in #general-help
CF Tunnel SSH Not Connecting
I'm having some trouble getting a CF Tunnel SSH session established. I have an active and healthy (confirmed with other apps on the same tunnel) CF Tunnel working on another server, running in a docker container. I want to enable CF Access SSH through the browser-based rendering. I went ahead and set up the Public Hostname on the Tunnel's page and set it to ssh://<server2> as the address. I'm getting a white screen when loading into the public hostname being set. On the host, SSH logs show: 
Jan 10 23:58:05 athens sshd[3660]: Connection from <server1> port 43228 on <server2> port 22 rdomain ""
Jan 10 23:58:05 athens sshd[3660]: error: kex_exchange_identification: Connection closed by remote host
Jan 10 23:58:05 athens sshd[3660]: Connection closed by <server1> port 43228
Jan 10 23:58:05 athens sshd[3660]: Connection from <server1> port 43228 on <server2> port 22 rdomain ""
Jan 10 23:58:05 athens sshd[3660]: error: kex_exchange_identification: Connection closed by remote host
Jan 10 23:58:05 athens sshd[3660]: Connection closed by <server1> port 43228
I confirmed that no firewalls are active and that server1 is able to properly SSH into server2 normally. Further, I also tried with a different CF Tunnel installed on the server2 directly with the same kex_exchange_identification error. This isn't the first time I've set up SSH over CF Tunnels, but this is the first time I'm seeing this and I'm incredibly baffled. Any help would be appreciated!
3 replies
CDCloudflare Developers
Created by musicman123 — FJLaboratories on 9/5/2023 in #general-help
Transparent Reverse Proxy Redirect?
This may be a dumb question, but if I'm looking to make a transparent reverse proxy redirect - what would be the easiest way of doing it? To sum, I have an existing Budibase (SaaS) site at https://xxx.budibase.com/example/*, but it's cumbersome to type. Instead, I want https://adam.example.com/* to point to it, and show the adam.example.com in the URL field (rather than a 301). The obvious answer seems to be using a Workers with the reverse proxy example code to do this and just bind adam.example.com to the worker. However, is there another product that's already purpose built for this? No additional auth is needed, so ZT seems like not the right solution.
4 replies