The Cloudflare implementation here sucks

submitted by 0_0 from self.SaidIt

sorted by:
top
newinsightfulfun
you are viewing a single comment's thread.

view the rest of the comments →

[–]binaryblob 2 insightful - 2 fun2 insightful - 1 fun3 insightful - 2 fun -  (5 children)

Your comment would be useful, if you explained how the implementation could be improved within the context of Cloudflare and saidit.

I think if this is Cloudflare's product and they don't know how to do better for their enterprise clients, I would short the shit out of their stock, but I doubt that's the case. It's much more likely that it's either a consequence of it being freemium or because saidit developer doesn't know what they are doing.

[–]ID10T 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (4 children)

You could have a script do a simple get request to the site at regular intervals before the Cloudflare timeout. That way as long as a user has a page loaded and are logged in, it pings the site to prevent the Cloudflare timeout.

For security, I would limit this ping to perhaps five minutes of inactivity, so a user doesn't stay authorized by Cloudflare indefinitely if they have a page left open on their browser.

I assume there's a template for when a user is logged in, like where the banner displays your username. You could add the script there with a timeout to GET /healthcheck every twenty seconds or whatever.

[–]In-the-clouds 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (3 children)

I tested that idea, and it mostly works.

[–]0_0[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (2 children)

What is the ideal number of seconds to refresh Saidit, to minimize bandwidth and yet still avoid Cloudflare's blockade?

To answer your question, it should refresh at the expiration of the cookie "cf_clearance" + 5 minutes, which is when the cloudflare pass expires.

In any case the fact that these kind of workarounds are required is fucking retarded.

[–]In-the-clouds 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (1 child)

5 minutes? It seems like Cloudflare blocks me if I just let 2 minutes go by without clicking on a new link.

[–]0_0[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

On my side is exactly 5 minutes, which is the smallest time span that can be set as challenge passage on Cloudflare.