Expect the things listed here to break often, not work as described, or just explode.

Stuff Link to heading

Cache and CDN Things Link to heading

See also default caching behavior.

default behavior, should always be a HIT:

curl -sI -X GET https://clumsy.dev/caching/cache1.jpg | grep cf-cache-status

cache-control set to private, should always return a cache MISS:

curl -sI -X GET https://clumsy.dev/caching/cache2.jpg | grep -E 'cf-cache-status|cache-control'

Cache Rules Link to heading

bypass cache with a query string:

This should always return DYNAMIC:

curl -sI -X GET "https://clumsy.dev/caching/cache1.jpg?v=1" | grep cf-cache-status

ignore cache-control header, cache regardless using a cache rule when a specific user-agent is being used. Should always be a HIT:

curl -sI -X GET -A "cacheme" https://clumsy.dev/caching/cache2.jpg | grep -E 'cf-cache-status|cache-control'

Without the user-agent it is not cached:

curl -sI -X GET https://clumsy.dev/caching/cache2.jpg | grep -E 'cf-cache-status|cache-control'

Image Things Link to heading

AI Things Link to heading

Workers Things Link to heading

Cloudflare for SaaS / SSL for SaaS Link to heading

cache:

kv:

durable objects:

R2 Things Link to heading

WAF Things Link to heading

curl https://clumsy.dev/custom-response

API Gateway / Shield Link to heading

Bot Management / Turnstile / Challenges Link to heading

Ruleset Engine Link to heading

origin rules:

Data Localization Suite / DLS Link to heading

Zero Trust Link to heading

Cloudflare Access Link to heading

curl -s -H "CF-Access-Client-Id: $stCliWorkerAccess" -H "CF-Access-Client-Secret: $stCliWorkerSecret" https://cli-access.clumsy.dev/

curl -s -H "CF-Access-Client-Id: $stCliWorkerAccess" -H "CF-Access-Client-Secret: $stCliWorkerSecret" https://jwt.clumsy.dev/

Data Loss Prevention / Zero Trust Policies Test Link to heading

The following require some Zero Trust policies configured in your account to work.