[New feature] Cloudflare for all

anas001122 · 2020-03-26T21:35:32.118Z

Hello @peterj
I can’t see the CloudFlare checkbox, I registered CNAME and ALIS records as explained, my domain is working but I can’t see the checkbox

scriptschool · 2020-04-04T04:22:28.646Z

Did you get an answer?

Need to know this as well…

peterj · 2020-04-08T18:01:21.045Z

@scriptschool and @josh10 (and any future dedicated customers)

– what’s happening is we’re silently adding .io records to your dedicated instance. So, for example, if you’re on d99.bubble.is, when you turn on cloudflare, we add d99.bubble.io, and then aim requests for your sites only from app.bubble.io to this endpoint.

Behind the scenes, it looks like
yourdomain.com → app.bubble.io → d99.bubble.io → (some ip address)

That changes as of today, though—as of today’s bubble version, we’ll be instructing you to use A records.

[Feature] Cloudflare improvements (now with A Records!) New features

Today, we’re excited to be rolling out a change to how Cloudflare works for customers. In the past, we distributed a CNAME record (app.bubble.io) that users had to ALIAS or CNAME to from their registrar. Many registrars don’t support ALIAS records, and that made using custom domains difficult. Today, we’re launching a new version of the Cloudflare feature that uses A records. When you register a new custom domain, you’ll be given two records of the form 104.19.241.93 that can be entered directl…

(Sorry for the delay; we’ve been working on this feature for a couple months and it’s finally ready.)

scriptschool · 2020-04-10T00:21:33.323Z

Thank you @peterj - this is great. I do have a follow up question…

Do I have to upgrade my dedicated box to take advantage of this?

Due to the bugs happening with Bubble lately (as reported on the forum), I don’t want to upgrade the box yet.

Thoughts?

peterj · 2020-04-10T00:34:25.895Z

Your box is new enough to take advantage of these features (and in fact I can see your dX.bubble.io DNS entry in our records, which means someone on your instance has checked the box at least once).

The version you’re on will tell you to CNAME to app.bubble.io, but you can instead create A records pointed at:
104.19.240.93
104.19.241.93

and you’ll be good to go.

(If you don’t feel comfortable doing this with a production app, create a new test app on a subdomain, like app-test.yourdomainhere.com just to run through the steps.)

All this said, I’ve been making very significant improvements to how we handle routing and certificate issuance in the past few months, so I encourage you to upgrade your instance as soon as you feel comfortable doing so.

edward.brandler · 2020-05-04T13:39:59.486Z

@peterj

I am hitting the exact same issue as outlined in this post. It’s been well over 24 hours. Any thoughts on what might be causing this?

CNAME and ALIAS records are set up correctly and pointing to app.bubble.io and the DNS provider (Namecheap) is adamant that it is not an issue on their end, indeed the A RECORD IPs are your addresses.

mark1 · 2020-05-13T16:23:15.604Z

Hey,

We use cloudflare already, we use to protect certain pages and use VPN to access parts of the website along with certain security requirements we have as a security expert I feel are necessary to protect us and our clients.

However for those that cannot use your cloudflare options, can you please share the settings you have applied so i can take a look at apply them also such as workers etc etc?

peterj · 2020-05-14T02:59:57.983Z

It’s pretty vanilla right now, but we’re constantly moving toward increased utilization of the speed and security features CF provides.
We reserve the right to change these at any time.

At the moment:

We do not use RocketLoader, as the dynamic page rewrites it causes are poison
We use Full SSL, and we’re in the middle of moving to Full (strict)
We use Brotli, query param ordering, HTTP/2, dynamic css minification, and a couple other speed features
We use edge caching extensively, and are in the middle of some improvements here

We are not extensively using page rules or workers or most of the other features people think of when they think of CloudFlare, because it’s often difficult to implement them in a way that’s beneficial to most users without breaking legacy behavior. But also, see above: we reserve the right to turn these features on as we find ways to do so that preserve or improve performance for everyone

mark1 · 2020-05-14T13:06:54.469Z

Can you please dig into the edge caching you use and their settings?

SrPeter · 2020-06-03T16:43:09.228Z

Hi!
@peterj
Does it still cover any DDoS attacks?
Thanks and great implementation

MarkusBoostedApp · 2020-08-15T20:19:03.151Z

@peterj is there any benefit of using Argo Tunnel if DNS is managed by Cloudflare?

stephane · 2020-12-08T09:58:04.113Z

Hey @peterj,

Switched to full (strict) then full resulted in SSL Handshake failed

Screenshot 2020-12-08 at 10.56.431978×1022 82 KB

Any idea ?

stephane · 2020-12-08T13:15:42.393Z

My bad.
This is now fixed by moving my legacy app to full cloudflare Too many redirects problem - GoDaddy

stephane · 2021-04-08T06:46:26.343Z

@peterj any plan to enable CF workers so we can use them in our CF ?

peterj · 2021-04-14T13:37:27.705Z

Based on how other CloudFlare features work, if we implemented workers, one of two things would happen:

We’d implement them to make the core bubble experience better for everyone
We’d implement them as optional add-ons for certain types of functionality

With our surface area (tens of thousands of unique domains) and account restrictions (i.e. caps on the numbers of workers we can deploy) it’s never going to be practical to enable arbitrary users to deploy arbitrary CloudFlare workers on our pages.

m.watkinson · 2022-02-10T11:08:32.686Z

Trying to push an app live and getting a Forbidden 403 error.
Have tried deleting the initial setup in bubble and redoing the process - but alas same result.

image1018×466 44.7 KB

Seems to be pinging correctly on DNS lookup

image509×676 8.96 KB

Does anyone have any suggestions as to how I might find a fix here?

Lari · 2022-02-22T21:54:29.445Z

I have the same issue

ts11 · 2022-04-15T19:38:10.076Z

Has the team given this any more thought? One area where I think this could deliver a lot of value to the majority of users would be enabling the Cloudflare worker for Prerender. Do you think this is likely?

https://docs.prerender.io/docs/24-cloudflare

aestela · 2022-06-28T22:54:26.144Z

Hey everyone!! appartenly @peterj is no longer part of the bubble team or something since he can’t be tagged and user profile no longer exists.

On to the question, is there any way we can tap in to the cloudflare analytics for our apps?

We have our own Cloudflare service and would be willing to use our own CF service to get the data and reports associated with it.

leandro.lmanes · 2022-12-22T11:58:25.490Z

Can we say Bubble has WAF for everyone? @peterj @emmanuel