[google-appengine] CloudFlare https traffic blocked?
Hi, We're trying CloudFlare to tide us over until Google enables SSL for custom domains. I'm open to suggestions, but so far this seems to be the simplest solution to get ready for Facebook's October 1st https requirement for canvas applications. For some reason, it seems traffic is being blocked when coming through CloudFlare over port 443. Going directly to our appspot domain works fine. The folks at CloudFlare don't seem to be aware of any issues - is anyone here able to confirm whether this still works, or perhaps even give a better alternative (for various reasons, Facebook must be pointing to our custom domain)? Thanks, Owen Wiggins Co-Founder, Inspirado Games -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/3GJGNZEq3PsJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
RE: [google-appengine] CloudFlare https traffic blocked?
Google Blocks CloudFlare when Flare starts to look like a DDoS Because they didn't implement their Proxy Headers correctly. I think I mentioned Sadness in my last response about using them. From: google-appengine@googlegroups.com [mailto:google-appengine@googlegroups.com] On Behalf Of Owen Wiggins Sent: Saturday, September 24, 2011 7:52 PM To: google-appengine@googlegroups.com Subject: [google-appengine] CloudFlare https traffic blocked? Hi, We're trying CloudFlare to tide us over until Google enables SSL for custom domains. I'm open to suggestions, but so far this seems to be the simplest solution to get ready for Facebook's October 1st https requirement for canvas applications. For some reason, it seems traffic is being blocked when coming through CloudFlare over port 443. Going directly to our appspot domain works fine. The folks at CloudFlare don't seem to be aware of any issues - is anyone here able to confirm whether this still works, or perhaps even give a better alternative (for various reasons, Facebook must be pointing to our custom domain)? Thanks, Owen Wiggins Co-Founder, Inspirado Games -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/3GJGNZEq3PsJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] CloudFlare https traffic blocked?
Thank you for your quick reply, Brandon! I believe CloudFlare uses the "industry standard X-Forwarded-For header": http://code.google.com/appengine/forum/?place=msg%2Fgoogle-appengine%2F4D1IGqCh4LA%2FrguR4Zqtj08J We're not seeing excessive traffic this week either - not sure what would be considered a possible DDoS by Google, though. Regardless, I'm really in a tough spot here and would love an alternative if anyone can suggest something. I'm sure many other developers are in a similar position... -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/cRtKFojKcBMJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
RE: [google-appengine] CloudFlare https traffic blocked?
No, they say that, but many of their headers have private IP ranges, reciprocal IP's, and other issues. They have a hacked together product running on borrowed infrastructure, I make a LOT of money cleaning up after them. And I feel bad because most the people who end up getting burned by them can't afford it. From: google-appengine@googlegroups.com [mailto:google-appengine@googlegroups.com] On Behalf Of Owen Wiggins Sent: Saturday, September 24, 2011 8:44 PM To: google-appengine@googlegroups.com Subject: Re: [google-appengine] CloudFlare https traffic blocked? Thank you for your quick reply, Brandon! I believe CloudFlare uses the "industry standard X-Forwarded-For header": http://code.google.com/appengine/forum/?place=msg%2Fgoogle-appengine%2F4D1IG qCh4LA%2FrguR4Zqtj08J We're not seeing excessive traffic this week either - not sure what would be considered a possible DDoS by Google, though. Regardless, I'm really in a tough spot here and would love an alternative if anyone can suggest something. I'm sure many other developers are in a similar position... -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/cRtKFojKcBMJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] CloudFlare https traffic blocked?
Thanks, Brandon. What I'm really after is a definitive answer on whether there's an issue on the AppEngine side. I'm currently working with CloudFlare support to resolve the issue. However, the $22 I've spent doesn't have me committed either way - I'm open to any solutions or alternatives. The only reason I'm trying CloudFlare is to get SSL working until Google has a permanent solution ready. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/KK75kBAyEloJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
RE: [google-appengine] CloudFlare https traffic blocked?
CF always blames GAE, but none of my sites that are proxied have this issue because My headers are "right". BTW Using CF as your SSL Solution opens a Whole host of issues, because of who you share resources with and CFs Less then optimal policies on security. From: google-appengine@googlegroups.com [mailto:google-appengine@googlegroups.com] On Behalf Of Owen Wiggins Sent: Saturday, September 24, 2011 9:19 PM To: google-appengine@googlegroups.com Subject: Re: [google-appengine] CloudFlare https traffic blocked? Thanks, Brandon. What I'm really after is a definitive answer on whether there's an issue on the AppEngine side. I'm currently working with CloudFlare support to resolve the issue. However, the $22 I've spent doesn't have me committed either way - I'm open to any solutions or alternatives. The only reason I'm trying CloudFlare is to get SSL working until Google has a permanent solution ready. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/KK75kBAyEloJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] CloudFlare https traffic blocked?
Currently, CloudFlare is not placing blame anywhere - I'm investigating issues on AppEngine's end of my own accord. What is your top pick for an alternative to CloudFlare? It seems like you have a lot of experience with these issues. Thanks! -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/zbsO901EWzMJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
RE: [google-appengine] CloudFlare https traffic blocked?
It's more a question of what you can do with your budget. There isn't an alternative to CF in any comparable Price range, which is why they do so much damage. It's them or something like Akamai at $22k a month, or roll your own using Squid and either a Could service or dedicated hardware at multiple POPs From: google-appengine@googlegroups.com [mailto:google-appengine@googlegroups.com] On Behalf Of Owen Wiggins Sent: Saturday, September 24, 2011 9:43 PM To: google-appengine@googlegroups.com Subject: Re: [google-appengine] CloudFlare https traffic blocked? Currently, CloudFlare is not placing blame anywhere - I'm investigating issues on AppEngine's end of my own accord. What is your top pick for an alternative to CloudFlare? It seems like you have a lot of experience with these issues. Thanks! -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/zbsO901EWzMJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] CloudFlare https traffic blocked?
I work at CloudFlare. Brandon, you spout a lot of incorrect information about CloudFlare. Care to state your affiliations, so readers can understand a bit more context? CloudFlare operates at large scale, with our own hardware, operating our own network, delivering more than 15 billion pageviews/month for more than 100,000 websites, and continuing to grow quickly. John Roberts first name at cloudflare dot com -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/vnWofZu3egIJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
