Cannot connect to Server through Cloudflare about swiftfin

[acvigue]

i’m using cloudflare too - with traefik. i need more details

[Huskydog9988]

That is as much detail as I know. There are no logs that I know of that can say why this is occurring. If your looking for URLs I tried through Cloudflare:

• http://domain.name
• https://domain.name
• http://domain.name:80
• https://domain.name:443

[acvigue]

do you have any url rewrite rules enabled - what is the ssl cert presented on both origin & edge?

[Huskydog9988]

It could be that I'm relying upon Cloudflare's 'flexible' ssl cert, and no I don't have any rewrites.

[Huskydog9988]

After just glancing at cloudflare's firewall logs it appears that the app was triggering Bot fight mode. Not sure what could cause this. The most likely issue in my mind is that http client is doing something cloudflare doesn't like.

[acvigue]

I remember coming across that in testing. It happens with both the swift client and the android client

…

Sent from my iPhone

On Jun 9, 2021, at 12:37 PM, Husky ***@***.***> wrote:  After just glancing at cloudflare's firewall logs it appears that the app was triggering Bot fight mode. Not sure what could cause this. The most likely issue in my mind is that http client is doing something cloudflare doesn't like. — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub, or unsubscribe.

[Huskydog9988]

Not that it would be a high priority, but I think this should at least be looked into. Besides me wanting to be able to use Cloudflares bot defenses, I do think this could have some serious effect in the future. I'm not sure what that is, but I have a creeping feeling that it might.

[acvigue]

it’s due to cloudflare. bot fight mode is not meant for production due to a multitude of false positives. swiftfin just uses generic HTTP requests and CloudFlare is probably getting mad at the user agent of “alamofire” Enable IUAM if it becomes a problem the app is the definition of a bot (aka not a human)

…

Sent from my iPhone

On Jun 9, 2021, at 5:03 PM, Husky ***@***.***> wrote:  Not that it would be a high priority, but I think this should at least be looked into. Besides me wanting to be able to use Cloudflares bot defenses, I do think this could have some serious effect in the future. I'm not sure what that is, but I have a creeping feeling that it might. — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub, or unsubscribe.

[acvigue]

or go into page rules and disable bot fight mode per subdomain