21–30 of 37 posts
You should blame Gitlab too, they configured it.
I have no idea what the problem was, but the “verify you’re human” thing never worked. Pretty annoying…
...odd isn't it?
I did take the rather unprecedented approach to blocking all DNS traffic to anything but our router (because Android was ignoring my DNS settings and using its own... ), breaking my internal dns resolution. Making DNS queries wonder from JS would be new to me... (I didn't think that was possible).
I'll dig more tonight.
I don't use GitLab but I do use Firefox for almost all my home and work browsing[1] and haven't had this problem with other sites which use cloudflare. I do use both ublock origin and advanced tracking protection always so I'm going to say the problem is with some configuration gitlab is doing rather than with cloudflare. [1] Exceptions being mobile, if I am specifically testing something and certain work situations…
Sorry for going off topic, but what exactly is an "Enterprise Browser"? Does it limit what sites can be accessed, what extensions can be installed if any, and what features are available to used by the websites? I guess it will provide capabilities to add AD's group policy object like mechanisms to the browser.
I've stopped visiting couple of sites because of CloudFlare. I keep using old Firefox with no scripts or ocassionally with uMatrix.
Why do you use an out-of-date browser?
I've stopped visiting couple of sites because of CloudFlare. I keep using old Firefox with no scripts or ocassionally with uMatrix.
> I've stopped visiting couple of sites because of CloudFlare. I keep using old Firefox with no scripts or ocassionally with uMatrix. Why do you use an out-of-date browser?
Something that Chrome is unwilling to support.
I can repro this in Chrome too when I have NextDNS as the DNS through our fiber connection. If I for example switch my phone to 4G it will let me through. I haven't dug into it yet as to why, there's nothing in the NextDNS block logs that looks relevant. But interestingly enabling NextDNS over 4G doesn't break it with the same settings. I did take the rather unprecedented approach to blocking all DNS traffic to anyth…
I can get on gitlab.com and get to their sign in page (which does the Cloudflare check), but it lets me see the login page. I don't have a GitLab account so that's as far as I can go. My own website uses Cloudflare too, so I put the security to "I'm under attack", and tried it. That works too.
I tried in Firefox (with uBlock Origin) and Edge (without). Same results across all three.
From what I can tell, the site that fails only sends and receives to that domain, ruling out a tracking domain I've blocked. It sends out multiple "rays", with what looks like an encrypted payload (and no I'm not reversing the JS, it's heavily obfuscated). There is no response to any of them, the connection is terminated.
On GitLab, which works, one of the rays fails with a 401, but the rest succeed.
Hopefully someone that works at Cloudflare can figure this out for us...