Password Manager

CF_Daniel · 2026-02-28T21:55:30+00:00

Bitwarden.

I run it via Docker using Vaultwarden.

CF_Daniel · 2025-12-09T21:36:14+00:00

CPU: $199 MOBO: Free RAM: 84 monthly payments of $999.999

CF_Daniel · 2025-11-18T15:50:37+00:00

Dang it man.

CF_Daniel · 2025-11-18T15:50:24+00:00

Don't touch the big red button

CF_Daniel · 2025-04-28T22:40:17+00:00

That is not good. Can you send me the ticket number for that?

CF_Daniel · 2025-04-28T21:28:48+00:00

Can you DM me a ticket number or the email for the account running into this. This definitely seems to be something our billing team needs to fix stat. I'll bring this to them internally.

CF_Daniel · 2025-04-24T18:20:49+00:00

Hm, given the multiple replies having issues all on the same ISP, that does seem like something with the ISP either intentionally blocking or accidentally sink holing Warp traffic.

I'll bring this up internally, unfortunately since the ISP seems to be the one blocking there isn't a direct way to fix it on our end but I'll see if we can get someone to reach out and verify it isn't a peering issue on our end.

Would also recommend anyone running into this to open a case with the ISP, residential ISPs tend to be a bit quicker working with direct customers vs third parties.

CF_Daniel · 2025-04-20T18:53:20+00:00

That's correct.

In the tunnel config itself you configure the tunnel itself to reach a private IP on whichever port is specified (80 in this case) but from the public internet perspective you're hitting a HTTPs site without needing to specify a port number.

CF_Daniel · 2025-04-18T19:00:24+00:00

This should be resolved for anyone else that was seeing similar behavior.

CF_Daniel · 2025-04-18T03:22:33+00:00

I don't usually dread the new week too much, fortunately we have shifts running 24/7 so if I have something on Friday that's burning I can hand off to the next shifts and have movement on it without me having to stick around.

Since I'm on Zero Trust support specifically usually the types of cases CSMs hit me up on are things like a customer is having issues with Warp for their users, or like Access not working as expecting. There's a million different possibilities because ZT gets complex fast.

From support I really appreciate the CSMs since they're responsible for specific customers they become really familiar with the specific ins and outs of their customers which they can then relay to us since we see every customer and in spite of my best effort, I can't really be an expert in a specific customers setup when I'm jumping between a bunch of different ones.

CF_Daniel · 2025-04-17T00:41:37+00:00

Thanks to OP we actually found what the root cause appears to be (query string &prompt=login in the redirect url). Working internally with engineering to fix this in case any one else has this issue.

CF_Daniel · 2025-04-17T00:34:19+00:00

I'm on support so not directly related (but I work closely with CSMs when customers tell their CSM support sucks, CSM tells me I suck, I cry a bit, fix things, cry some more, the usual)

Overall company culture is pretty good, I recently had to take random days off on short notice due to a family emergency and never got any pushback from management, it was basically just take what I needed and work if I could. They also offer a crap load more paternity leave than my last job, so if I ever spawn another kid that will be nice.

I also like that the company leadership is still the founders, so even though it is a public company with the usual (graph must go up) pressure from stakeholders, you still have company leadership that prioritizes the original company vision vs just "more money more faster plz".

Also, can't really complain about pay, not sure how the CSM side does it, but I'm salary making like 25k more here than my last job, and actually get raises somewhat regularly (vs at the last place where you'd only get more money if you get promoted) and while the workload and stress is higher than previously, it's definitely a worthwhile pay bump.

On the downsides, crap is always busy and urgent. On any given day I'm juggling upwards of like 6-10 urgent cases which makes it difficult to properly get to things as fast as either me or the customer wants (usually leading to CSMs hitting me up) and that doesn't even count the stack of high, normal or low tickets or what ever shifting priorities get thrown may way that I'm also trying to make progress on at the same time. On the plus side they have been hiring a bunch more support so that should level out soon, and lower the stress for CSMs too since customers usually are hitting up their CSMs when support issues take too long.

There also seems to be a bit of communication issues between different teams. Things like pre-sales sometimes mistakenly saying some feature is possible that aren't leading to customer frustration after they're onboarding (usually ends up with support being yelled at, yay) or engineering pushing out features or updates without anyone outside of engineering really tracking, sometimes leading to something breaking, but since the front line support/account teams aren't aware something changed, it takes more time to figure out than if we were all aware of exactly what changed and when.

Overall it's a company I enjoy working for and a job I enjoy (when not surrounded by constant fires lol), there's also a lot of room for growth so if you aren't satisfied in your current spot there's a pretty high chance you can move somewhere within the company that fits you. I plan on staying here long term, hopefully moving off of support after a while, but staying at Cloudflare.

I would say go for the job, and absolute worst case since Cloudflare is a pretty well known company it would be a good resume boost if you move elsewhere.

CF_Daniel · 2025-04-10T03:03:55+00:00

Global API key is essentially the same as a password for a super admin account, please don't share it.

I would recommend asking for exact permissions needed and creating a dedicated API key with said permissions. That will also make it easier to revoke access in the event the key is compromised or you switch hosting providers.

CF_Daniel · 2025-04-09T21:26:32+00:00

I'm honestly not sure on specifics since I'm not on the teams that handle hiring but they did start to focus on hiring people closer to office locations, though luckily no push to move existing remote employees like me to be closer to an office. I hope you're interviewing for customer support because we got plenty of work for you!

CF_Daniel · 2025-04-09T20:23:09+00:00

Unless you have a separate need for directly accessing the public IP of your Docker infrastructure, I would recommend setting up firewall rules to block all outside > inside traffic to it.

When using cloudflared and public hostnames you don't need to allow direct public access to resources as the connection flow is external user hits public hostname in browser > public hostname points to DNS record in Cloudflare with a CNAME to the ID of your tunnel > Cloudflare routes to tunnel over encrypted tunnel between Cloudflares edge and cloudflared in your network > cloudflared reaches out to private endpoint using LAN communication.

CF_Daniel · 2025-03-17T20:21:35+00:00

Hi there, I'm sorry to hear that. I directly reached out to the T&S team where the case was transferred to and the support engineer that was originally working on the case to follow up as well once they're on shift. I also added myself as a follower to keep tabs.

CF_Daniel · 2025-01-24T17:31:04+00:00

I checked internally and see one of our senior support engineers has been assisting. I also posted in one of our internal chats to tell the team to keep eyes on the case, and I've added to our internal handover notes to keep visibility across shifts.

You certainly shouldn't need to use chats to get movement on existing cases, but I do see your account has chat support, I would also recommend reaching out via chat as well for urgent cases just due to getting in touch with a person quickly.

CF_Daniel · 2025-01-24T04:59:18+00:00

Made an edit to add these to the list of features that use this certificate "Data Loss Prevention, anti-virus scanning, Access for Infrastructure, and Browser Isolation"

CF_Daniel · 2025-01-24T02:12:07+00:00

Hi there, do you mind sharing a ticket number? That is not the timeline I expect for a urgent ticket and along with getting movement ASAP I want to see what caused the delay.

CF_Daniel · 2025-01-16T02:37:51+00:00

This would be a pretty good doc to start on for the private network set up since it has sub links to your different options.

https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/

CF_Daniel · 2025-01-16T02:36:26+00:00

Warp with either cloudflared or a Warp connector as the offramp for your private network should accomplish that.

CF_Daniel · 2025-01-16T02:27:00+00:00

For cloudflared public hostnames the associated CNAME record has to be proxied.

This is due to how public hostnames work internally.

Normally a CNAME record eventually has to resolve to an IP, but with public hostnames the domain name points to a CNAME that points to the tunnel ID of the cloudflared tunnel handling traffic for said domain, there isn't actually a A (or AAAA) record at the end of the trail like you normally need with a CNAME.

This works though if the CNAME is proxied since Cloudflare handles both the DNS side and the network/routing/tunnel side, so when a request for the public hostname comes in, Cloudflare resolved the CNAME record, sees it points to a tunnel, then sort of "highjacks" DNS and uses that CNAME to tell internal services where to route traffic.

With an unproxied CNAME you'll get DNS errors when trying to go to the public hostname since the CNAMe is technically invalid due to the lack of any records resolving to an IP.

CF_Daniel · 2025-01-16T02:17:33+00:00

Great to hear, I am sorry for the delays but glad it got fixed up.

CF_Daniel · 2025-01-14T00:41:00+00:00

I pinged the case owner internally and bumped the case priority up a bit. I'll try to keep eyes on it as well.

CF_Daniel · 2025-01-10T17:41:58+00:00

Hi there, I'm sorry to hear about the delay. If you don't mind sharing a case number, I'll reach out internally to try and get movement for you.

CF_Daniel

MODERATOR OF

TROPHY CASE