r/CloudFlare

OpenClaw on Cloudflare — Post-Mortem
▲ 15 r/CloudFlare+1 crossposts

OpenClaw on Cloudflare — Post-Mortem

Project: Personal AI assistant (OpenClaw, ex-Moltbot/Clawdbot) on Cloudflare Workers + Sandbox container
Lifespan: ~1 August 2026 → 19 August 2026 (decommissioned)
Final cost: $96.59 for 24 days of the Jul 27–Aug 26 cycle ($4.02/day average, $124.76 projected) — against an expected "$5/month" Workers Paid plan
Decommissioned: 2026-08-19, everything deleted, daily charges stopped

My recommendation: Do not launch OpenClaw on Cloudflare! :-)

I know now where containers go to die! :-D

u/Paolo-Cortez — 1 day ago

My cloudflare warp suddenly stopped working.

Last week if I turn it on my youtube change from my country to Singapore and I still have access to games on the singapore app store. Last 3 days when I turn it on it still said connected, but my youtube is still in my country and I can't find the game that I've been playing..

This also happens on the 1.1.1.1 version on my phone too, does anyone knows whats wrong?

reddit.com
u/RuinaIV — 1 day ago

WordPress site under massive automated attack — Cloudflare Free not stopping it

Hi everyone,

I’m dealing with a serious automated attack against a WordPress website and would really appreciate some advice from the Cloudflare community.

The website is hosted on Hostinger Cloud Startup. It was recently moved behind Cloudflare Free because the traffic/attack was becoming difficult to handle at the origin.

The attack appears to be highly automated and is coming from 150+ unique IP addresses, making simple IP blocking ineffective. The requests are also distributed across different IPs and appear to be targeting the website continuously.

What I’ve tried so far:

  • Cloudflare Free plan
  • Bot Fight Mode
  • Multiple WAF/custom rules
  • IP-based blocking
  • User-Agent based rules
  • Various challenge/block rules
  • Reviewing Cloudflare Security Events

Cloudflare is clearly detecting/blocking a significant amount of the traffic, but the problem is that the website itself is still becoming inaccessible/unresponsive, especially during the attack.

From what I can see, this isn't simply a handful of bad IPs — it looks more like a distributed automated attack.

My questions:

  1. What would be the best WAF strategy for this type of WordPress attack?
  2. Should I focus on rate limiting, URI/path-based rules, ASN/hosting-provider blocking, or something else?
  3. Is Cloudflare Free sufficient for this type of attack, or would Pro/Super Bot Fight Mode make a significant difference?
  4. How can I make sure these requests are stopped at Cloudflare and don't continue consuming Hostinger/origin resources?
  5. Are there specific Cloudflare rules you recommend for WordPress under this kind of automated attack?
  6. How can I preserve SEO efforts & what should I make changes in Search Console?

I’ve attached a screenshot showing the traffic pattern.

I’d really appreciate any recommendations from people who have dealt with a similar situation.

Thanks!

u/digitalnomad_eu — 2 days ago

Using Cloudflare Stream as a temporary transcoder: smart shortcut or bad idea?

We’re trying to reduce video transcoding costs for our SaaS.

We started with AWS MediaConvert. It was reliable, but expensive. We then moved to FFmpeg on ECS Fargate Spot and cut costs by about 30%, but transcoding is still one of our biggest infrastructure costs.

I’m now considering this pipeline:

  1. Upload the source video to Cloudflare Stream
  2. Wait for encoding
  3. Generate a downloadable MP4
  4. Download it to our own storage
  5. Delete the Stream asset

From the docs, ingress and encoding are free, storage is billed by video minutes, and MP4 downloads count as delivered minutes. On paper, that looks surprisingly cheap for one-off conversions.

Has anyone used Stream this way in production—as a temporary transcoding service rather than primarily for playback?

I’m particularly curious about:

  • Time from upload to a downloadable MP4 being ready
  • Concurrency or API rate-limit issues
  • Control over output resolution, bitrate, and codec
  • Whether the final cost stayed low at scale
  • Any operational catch I’m missing

Is this a reasonable use case, or am I trying to use Stream for something it wasn’t designed for?

https://preview.redd.it/35iv2pmqq8kh1.png?width=1920&format=png&auto=webp&s=ce3dc0ead5b6b723917644a63d190faa037f8c96

reddit.com
u/Tricky-Sir-6110 — 2 days ago

Warp doesn't work anymore.

I've been delaying the update recently because everything was working fine, but WARP stopped working for me a week ago, so I've downloaded the update thinking it's got to be something with the older version. But even after the update WARP still doesn't work. What should I do? I've tried every mode, some websites open, some of them don't. Mainly I've been using for the Discord, app opens, but messages won't load or cannot connect to the voice channels.

reddit.com
u/onewhocantknock — 2 days ago

Page Rule redirect failing - Proxied Dummy records and Full SSL

My old Cloudflare page rule redirect suddenly stopped working and now throws an ERR_NAME_NOT_RESOLVED error

Page Rule: ://sub.domain.com* -> 302 Redirect to https://external-site.com

//sub.domain.com is an A record pointing to a dummy IP (192.0.2.1), set to Proxied (Orange Cloud).

SSL: Set to Full.

the rule worked fine for years before this, not sure what I changed

Changed the dummy IP to a different one (192.0.2.2) so it doesn't share the exact same IP as the root domain.

root domain is an A record pointing to a dummy IP (192.0.2.1), set to Proxied

Cloudflare AI says it should work and everything else says if it's proxied it should do the rule

reddit.com
u/Seppu477 — 1 day ago

My Premium subscription disappeared from the Cloudflare Mobile app after I performed a “Reset Security Key” and “Reset All Settings” in the Cloudflare app settings. I’ve tried to restore my purchase, but I get the message: "Your order is being processed. Please try again in a few moments". Help

reddit.com
u/alpha_shadow7 — 2 days ago

Should I start with Terraform?

I'm working with a SaaS product with about 600 domains pointed to it. Right now all of our firewall and routing rules are handled in Azure Front Door and we're migrating to Cloudflare enterprise for the firewalls/bot mitigation

Front Door has gotten messy, with tons of rules and 75% I have no idea why they were added.

Since I'm starting from scratch, I thought it might be smart to set up Terraform before I do anything, so I'll have some git history going forward.

I'm a developer by trade and have no experience with Cloudflare or Terraform. Is this a wise thing to do? Or am I signing myself up for a world of hurt? Any advice, tips, gotchas, or recommendations are appreciated

reddit.com
u/meticulouschris — 2 days ago

cant connect

cannot connect to it even tho i deleted the app and redownloaded it what should i do

u/stupid-N — 2 days ago

i need some help about cloudflare warp

Last week, my Cloudflare WARP egress IP was in Los Angeles or San Jose, USA, corresponding to the hosting centers I might be connecting to — LAX and SJC. But now, for some reason, the egress IP of the consumer version of Cloudflare WARP has become the same as the Zero Trust version — it's also a mainland China egress IP. Although I can still access platforms like Google, I can no longer access platforms like ChatGPT. This behavior is the same across all platforms. I know Cloudflare's policy, but why did this change just recently? I'd like to know why this suddenly changed.

u/Far_Hovercraft_2067 — 2 days ago

Error 522 mydomain.co.uk works, but www.mydomain.co.uk doesn't work.

*** SOLVED ***

Hi there,

I've put my website into GitHub which I have linked to CloudFlare to host, the domain is from 123 Reg.

If I put mydomain.co.uk into the browser, the site loads, however www.mydomain.co.uk comes up with error 522.

I've tried adding www.mydomain.co.uk as a route / domain and I get the following message "No zones match www.mydomain.co.uk. If you already own this domain and want to connect it to your Worker, start by adding the domain to Cloudflare."

Any ideas?

reddit.com
u/Far-Vegetable2133 — 2 days ago

My enterprise account is downgraded to free even after paying all the Bills..

I cannot get in touch with the staff, we are a gov organization, I have tried for weeks to get in touch with support, but the ticket gets closed. We missed a bill and account got downgraded, since then we paid all the bills but account is still stuck in free version. How do I solve this or get in touch with someone in CF. And I tried calling the number in support too, There was no answer.

reddit.com
u/OTonConsole — 3 days ago

Stuck in Security Verification Endless Loop

I've been having issues accessing some websites on my laptop; accessing certain sites would have me waiting for them to finish "Performing security verification" but I ended up waiting 10 minutes and never even got any Captcha or alternate method to confirm I'm not a bot. I tried the available Cloudflare troubleshooting methods but none of them worked so I figured it was a site-specific issue, then I ran into the same instance with a completely different website! Did everything I did on the previous instance and still stuck in this "Performing security verification" loop.

I attempted to access these webpages through a different browser on my laptop but ran into the same issues, however, I was able to access them easily on my phone with no issues. I'm assuming it has something to do with Cloudflare itself and my laptop specifically at this point, can anyone here help me get this sorted out?

reddit.com
u/ToastedwConsequences — 2 days ago

I host my business' website at home, behind Cloudflare

I've had this tower PC sitting in the meter closet for years, doing the usual homelab stuff - running Home Assistant, storing photos, and handling some Linux ISOs. I even run an OPNSense VM handling the internet connection.

I live literally next to the exchange and I've got rock solid fiber internet, so when starting my own small business I thought I'd give it some more duties, namely running my website and ERP. Running a business website straight off your residential internet connection (even though I do have a business contract) would be a terrible idea, so Cloudflare Tunnels and CDN are definitely to the rescue here.

Use the cloud where it's impossible for you to meet the same scale, and self-host everything else.

The video linked is made to grab the attention of the Instagram/Tiktok newbie audience so maybe it doesn't work for you, but the blog post gets into more detail on my setup :)

elvinhome.io
u/Eelviny — 4 days ago

Cloudflare D1 is highly unreliable

Our entire platform is on Cloudflare stack (Workers, D1, R2, KV, Queues). Few thousands visit our website every day. Even though we are small, we have many business critical flows (like lead capture, payments, etc.) that requires reliable backend and database.

We only had one engineer and we needed something quick / simple so we modeled our data based on D1 (big mistake).

We have been facing significant D1 reliability issues. It keep stalling for 30+ seconds multiple times a day. It keeps showing D1_ERROR: D1 DB storage operation exceeded timeout which caused object to be reset.

Cloudflare engineering support says it is their fault but this "falls within the range of events that can affect D1 databases".

Anyone else facing these issues with D1? We hardly have 50 MB of data, queries are extremely simple and optimized. We already have retry loop but 30+ second of stall is a deal breaker. A quick search reveals that it is a very common problem. We should have done some research on this -- were blindfolded by Cloudflare's reputation.

How do you justify 30+ seconds stalls multiple times a day?

u/t3bk4 — 4 days ago

Deleted all Security Rules was restricting User-Agents (that blocked Search Bots too) Now Start from fresh.

Finally deleted all security rules, as i was blocking user-agents too, which was blocking search engine crawlers and natural traffic was badly effected.
Deleted all security/waf rules and want to start fresh.

Can see lot of guests/bots activity now, want to proceed properly.
Need guidance here, there are many IPs accessing website now, how to do i proceed ahead ?
Can see user-agent strings which are AI bots.

Thanks.

reddit.com
u/R3dAt0mz3 — 2 days ago
▲ 7 r/CloudFlare+2 crossposts

Website intermittently inaccessible on certain ISPs — DNS issue?

We’ve been facing an unusual issue with our website for the last couple of months.

The website works perfectly on some internet connections, but on certain ISPs it sometimes becomes inaccessible. After some time, it starts working again without us making any changes.

What’s confusing is that this happens intermittently — the same ISP may work at one point and then fail later.

We’re using Cloudflare for DNS, and the server is online and accessible from other networks when the issue occurs.

It seems like the problem may be related to ISP DNS resolvers, DNS caching, or ISP-level routing, rather than the server itself.

Has anyone experienced similar issues with Indian ISPs?

What would be the best way to identify whether the problem is actually with the ISP's DNS resolver/routing?

Any suggestions for troubleshooting or proving that the issue is ISP-side would be appreciated.

reddit.com
u/sanjaychakravarti — 3 days ago

How can Free users contact Cloudflare support after account hacked?

My Cloudflare account was taken over. Two unauthorized domains were registered, and eight additional domain-payment attempts were blocked by my payment provider.

I had previously connected Cloudflare’s MCP server with full write access. I suspect it may have been involved, so I removed it and secured the account.

I emailed the address Cloudflare provided (registrar-abuse @ cloudflare dot com) , but they replied that it does not accept these reports and redirected me to the abuse form. The “Submit a case” section gives Free users no way to enter custom text explaining an account takeover.

This is not simply a billing issue. I need to report the takeover, confirm my account is secure, void the unpaid invoices, and request refunds for the two unauthorized charges.

How can I contact the correct Cloudflare security or Registrar team? Contacting Cloudflare is my main problem.

EDIT: I want to clarify that I have access to the account, I did all security stuff (all the ones I know: reset password, activated 2fa, removed all backdoors he kept, revoked mcp and all tokens and activated some ddos attack protection rules because I also found unusual traffic.). and the only remaining problem is having them listen to me somehow to report this incident and also get a refund. I couldn't raise a case and email communication is not working.

reddit.com
u/aymenwastaken — 3 days ago

Warp doesn’t work

Basically i updated it like this Friday and ever since then doesn’t work although my internet is working fine and warp saying it’s connected also Roblox doesn’t work too same with discord etc am i only one or does other people have this problem too?

reddit.com
u/Appropriate-Look-566 — 4 days ago