Cloudflare blocks REST API requests

  • Resolved monbeaupays

    (@monbeaupays)


    6 years, 3 months ago

    Hello,

    The Gutenberg plugin blocks the editing of post because of the Cloudflare Firewall, Message: Cloudflare blocks REST API requests.

    I have disabled WP0025A” and “WP0025B rules in the Cloudflare ruleset dashboard as indicated on the wordpress problem solving method. This worked for a day but the problem returned. While the rules are still off.

    Do you know what the problem could be?

Viewing 9 replies - 1 through 9 (of 9 total)

  • Hi there,

    It appears that there are more issues with CloudFlare beyond what was initially fixed. I don’t think a solution has been found yet, but you can follow along on this issue:

    https://github.com/WordPress/gutenberg/issues/2704#issuecomment-413067208

    @coreymckrill, It looks like the Github ticket is closed? It looks like this has been a problem since last fall, yikes!

    I am wondering, does Gutenberg generate a lot of server requests as you edit? I know that with some hosts, if I have, say a javascript that repeatedly makes ajax requests (to load dynamic content from the server into the page after the page has loaded) then the server’s firewall gets a little miffed and either throttles or denies the requests, if it sees a batch of requests made near-simultaneously. In my situation I had basically a set of 20 blank DIVs and then had javascript load the content by making various requests of the server, and the workaround was to delay the requests slightly.

    So is it possible that what is going on is that CloudFlare is seeing a lot of requests from the same IP address and regards them as a security issue?
    I am just trying to wrap my head around this.

    Thread Starter monbeaupays

    (@monbeaupays)

    Hello,

    The only solution I’ve found to work around this problem is to whitelist the blocked ip addresses involved in the cloudflare dashboard. This solution may not be the best but it does not have the problem. If we follow the official WordPress resolution method by blocking the WP0025A and WP0025B queries in the firewall the problem remains, I do not know how they handle the problem but they are totally lost about it.

    Moderator Marius L. J.

    (@clorith)

    If you follow the mentioned ticket, you will see it is still active (the closed state is from the original issue, but it has since been discovered that CloudFlare may be blocking more things. We are actively communicating with them to find out what and why to resolve the issue, and any updates will land in that ticket.

    Thread Starter monbeaupays

    (@monbeaupays)

    Ok thank you I will follow this ticket closely.

    Syamsul Alam

    (@syamsul-alam)

    …and until today, 2 months later this issue is not resolved yet.

    Gutenberg still showing error “Updating Failed” & “Cloudflare blocks REST API requests”.

    Moderator Marius L. J.

    (@clorith)

    If you’ve encountered further issues with CloudFlare, please provide details on the GitHub issue at https://github.com/WordPress/gutenberg/issues/2704, this is a more than 2 month old topic and isn’t actively watched, while the right people get notified if you provide input on the ticket in question.

    i have the save issue with my application while using the “under attack mode”.
    To workaround this, i create 2 Page rules with the security level medium.

    for JSON :>> https://*.domain-name.com/wp-json/wp/v2/*
    for images:>> https://*.domain-name.com/wp-content/uploads/*

    i hope that help.

    Moderator Marius L. J.

    (@clorith)

    As this topic is more than 5 months old, I am closing it to prevent unnecessary email notifications going out.

    Please note that the above settings may diminish the effect of your Cloudflare protection.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Cloudflare blocks REST API requests’ is closed to new replies.

Tags