https://discord.cloudflare.com logo
Join Discord
Powered by
# general-discussions
  • e
    Yes, the more specific app wins over the wildcard and will bypass what you tell it to
  • e
    You can do *.example.com -> allow only you public.example.com -> bypass for everyone and it works how you would expect
  • l
    Got you
  • l
    Thank you 🙂
  • r
    Am I missing something here or is this bulk redirect just not working properly?
    screen-recording-2023-04-06-at-00-48-52
  • r
    It's proxied. Subpath matching is on. Tried a redirect rule too.
  • m
    @James what would it look like with Cache Reserve? Even though technically the objects live not on R2, could you cache anything as long as cache reserve is a thingy?
  • j
    I can’t imagine it’d be an issue given that it’s a usage based product when it comes to pricing
  • c
    It's because you are never actually requesting the 404 path, you'll notice if you go to it directly , you do get redirected. It's just using javascript to rewrite the url without a redirect, client-side javascript navigation
  • r
    Oh right.
  • r
    I'll contact my forum provider.
  • r
    Thanks.
  • c
    How new is your custom domain? Some times it takes a bit for a certificate to be issued for it
  • c
    You always want 
    Full Strict
    for SSL
  • r
    Unless...
  • c
    Hmm that should be enough time. What is the domain?
  • c
    Pages has it's own caching that is handled automatically so you don't need to clear it. You should also not being doing any caching in front of your pages project
  • c
    (In case it's worth clarifying, you still do want and should use Full (Strict). Full is insecure, as you're trusting any certificate. If someone MITMs the connection and presents any self-signed certs, it would be accepted. So you'd have encryption to the bad guy. )
  • r
    It was trusted by all browsers.
  • r
    Full Strict ruined that.
  • g
    What’s a good way to start a full cloudflare stack project?
  • r
    Don't care if it's not secure. I want my site to work.
  • r
    Plus, it's got to be better than not using Cloudflare at all!
  • c
    Who was the cert issued from?
  • r
    I'll unproxy forum.RyderCragie.com. One sec.
  • r
    Done
  • r
    Now you can see.
  • c
    Strictly speaking, if something is wrong with the certificate and Cloudflare is rejecting it, then using Full or Flexible to get around it is basically lying to clients about the security of the connection
  • c
  • c
    Do they tell you to use a CNAME or an A/AAAA Record? If it's a cname, CF will accept the cert if it contains the target when it is proxied
1...395339543955...4267Latest