Skip to content
16 changes: 8 additions & 8 deletions src/content/docs/1.1.1.1/faq.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,9 @@ Below you will find answers to our most commonly asked questions. If you cannot

1.1.1.1 is Cloudflare's fast and secure DNS resolver. When you request to visit an application like `cloudflare.com`, your computer needs to know which server to connect you to so that it can load the application. Computers don't know how to do this name to address translation, so they ask a specialized server to do it for them.

This specialized server is called a DNS recursive resolver. The resolvers job is to find the address for a given name, like `2400:cb00:2048:1::c629:d7a2` for `cloudflare.com`, and return it to the computer that asked for it.
This specialized server is called a DNS recursive resolver. The resolver's job is to find the address for a given name, like `2400:cb00:2048:1::c629:d7a2` for `cloudflare.com`, and return it to the computer that asked for it.

Computers are configured to talk to specific DNS resolvers, identified by IP address. Usually the configuration is managed by your ISP (like Comcast or AT\&T) if you are on your home or wireless Internet, and by your network administrator if you’re connected to the office Internet. You can also change the configured DNS resolver your computer talks to yourself.
Computers are configured to talk to specific DNS resolvers, identified by IP address. Usually the configuration is managed by your ISP (like Comcast or AT\&T) if you are on your home or wireless Internet, and by your network administrator if you are connected to the office Internet. You can also change the configured DNS resolver your computer talks to yourself.


## How can I check if my computer / smartphone / tablet is connected to 1.1.1.1?
Expand All @@ -28,7 +28,7 @@ Computers are configured to talk to specific DNS resolvers, identified by IP add
Visit [1.1.1.1/help](https://one.one.one.one/help) to make sure your system is connected to 1.1.1.1 and that it is working.


## What do DNS resolvers do?
## What do DNS resolvers do

DNS resolvers are like address books for the Internet. They translate the name of places to addresses so that your browser can figure out how to get there. DNS resolvers do this by working backwards from the top until they find the website you are looking for.

Expand All @@ -52,7 +52,7 @@ Cloudflare [stopped supporting the ANY query](https://blog.cloudflare.com/deprec
1.1.1.1 is a DNSSEC validating resolver. 1.1.1.1 sends the `DO` (`DNSSEC OK`) bit on every query to convey to the authoritative server that it wishes to receive signed answers if available. 1.1.1.1 supports the signature algorithms specified in [Supported DNSKEY signature algorithms](/1.1.1.1/encryption/dnskey/).


## ​Does 1.1.1.1 send EDNS Client Subnet header?
## ​Does 1.1.1.1 send EDNS Client Subnet header

1.1.1.1 is a privacy centric resolver so it does not send any client IP information and does not send the <GlossaryTooltip term="EDNS Client Subnet (ECS)">EDNS Client Subnet (ECS)</GlossaryTooltip> header to authoritative servers. The exception is the single Akamai debug domain `whoami.ds.akahelp.net` to aid in cross-provider debugging. However, Cloudflare does not send ECS to any of Akamai's production domains, such as `akamaihd.net` or similar.

Expand All @@ -62,22 +62,22 @@ Cloudflare [stopped supporting the ANY query](https://blog.cloudflare.com/deprec
1.1.1.1 has full IPv6 support.


## What is Purge Cache?
## What is Purge Cache


1.1.1.1's Purge Cache tool allows you to refresh 1.1.1.1's DNS cache for domain names. To refresh the cache for a domain name, visit the [Purge Cache page](https://one.one.one.one/purge-cache/).


## What is query name minimization?
## What is query name minimization

Cloudflare minimizes privacy leakage by only sending minimal query name to authoritative DNS servers. For example, if a client is looking for foo.bar.example.com, the only part of the query 1.1.1.1 discloses to .com is that we want to know who's responsible for example.com and the zone internals stay hidden.


## What are root hints?
## What are root hints

For decreased latency, reduced privacy leakage of queries and lower load on the DNS system, 1.1.1.1 upstreams to [locally hosted root zone files](https://blog.cloudflare.com/f-root/).

## Can IPs used by 1.1.1.1 be allowlisted?
## Can IPs used by 1.1.1.1 be allowlisted

Authoritative DNS providers may want to allowlist IP's 1.1.1.1 uses to query upstream DNS providers. The comprehensive list of IP's to allowlist is available at [https://www.cloudflare.com/ips/](https://www.cloudflare.com/ips/).

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ When a request is blocked by guardrails, you will receive a structured error res
- `"code": 2016`
- `"message": "Prompt blocked due to security configurations"`

- **Response blocked**
- **Response blocked**
- `"code": 2017`
- `"message": "Response blocked due to security configurations"`

Expand Down
2 changes: 1 addition & 1 deletion src/content/docs/ai-gateway/universal.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ You can use the Universal endpoint to contact every provider. The payload is exp

- `provider` : the name of the provider you would like to direct this message to. Can be OpenAI, workers-ai, or any of our supported providers.
- `endpoint`: the pathname of the provider API you’re trying to reach. For example, on OpenAI it can be `chat/completions`, and for Workers AI this might be [`@cf/meta/llama-3.1-8b-instruct`](/workers-ai/models/llama-3.1-8b-instruct/). See more in the sections that are specific to [each provider](/ai-gateway/providers/).
- `authorization`: the content of the Authorization HTTP Header that should be used when contacting this provider. This usually starts with "Token" or "Bearer".
- `authorization`: the content of the Authorization HTTP Header that should be used when contacting this provider. This usually starts with 'Token' or 'Bearer'.
- `query`: the payload as the provider expects it in their official API.

## cURL example
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Cloudflare account analytics lets you access a wide range of aggregated metrics

:::note

For general information about all of Cloudflare's analytics offerings, refer to [About Cloudflare Analytics](/analytics/faq/about-analytics/).
For general information about all of Cloudflare's analytics offerings, refer to [About Cloudflare Analytics](/analytics/faq/about-analytics/).
:::

***
Expand All @@ -32,7 +32,7 @@ Once it loads, the Account Analytics app displays a collection of categorized ch

## Review your account metrics

This section outlines the aggregated metrics under each category.  Before reviewing your metrics, lets define a couple of concepts used in some panels:
This section outlines the aggregated metrics under each category. Before reviewing your metrics, let's define a couple of concepts used in some panels:

* *Rate* -  Reflects the ratio between the amount for a specific data category and the total.
* *Bandwidth* - Refers to the number of bytes sent from the Cloudflare edge network to the requesting client.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,9 @@ title: Cloudflare analytics with Workers

Learn how Cloudflare analytics tracks requests made by [Cloudflare Workers](/workers/).

## What is a subrequest?
## What is a subrequest

With a no-op Worker (a Worker that simply proxies traffic by passing on the original client request to the origin and proxying the response) running on a particular route, the request to the origin is counted as a subrequest, separate from initial client to edge request. Thus, unless the Worker responds with a static response and never hits an origin, the eyeball → edge request, and edge → origin request will each be counted separately towards the request or bandwidth count in Analytics.  Subrequests are not included in the **Requests** or **Bandwidth** graphs of the Cloudflare **Analytics** app.
With a no-op Worker (a Worker that simply proxies traffic by passing on the original client request to the origin and proxying the response) running on a particular route, the request to the origin is counted as a 'subrequest', separate from initial client to edge request. Thus, unless the Worker responds with a static response and never hits an origin, the eyeball → edge request, and edge → origin request will each be counted separately towards the request or bandwidth count in Analytics. Subrequests are not included in the **Requests** or **Bandwidth** graphs of the Cloudflare **Analytics** app.

***

Expand All @@ -29,7 +29,7 @@ For a breakdown of subrequest traffic (origin facing traffic), you may go to the

## FAQ

**Why dont I have any analytics for Workers?**
**Why don't I have any analytics for Workers?**

* If you are not currently using Workers (don’t have Workers deployed on any routes or filters), we will not have any information to show you.
* If your Worker sends a static response back to the client without ever calling fetch() to an origin, you are not making any subrequests, thus, all traffic will be shown in zone Analytics
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ title: Status codes

:::note

Status Codes analytics by data center is exclusive to the [enterprise level of service](https://www.cloudflare.com/plans/enterprise/contact/).
Status Codes analytics by data center is exclusive to the [enterprise level of service](https://www.cloudflare.com/plans/enterprise/contact/).
:::

Status Codes metrics in the Cloudflare dashboard **Analytics** app provide customers with a deeper insight into the distribution of errors that are occurring on their website per data center. A data center facility is where Cloudflare runs its servers that make up our edge network ([current locations](https://www.cloudflare.com/network/)).
Expand Down Expand Up @@ -59,7 +59,7 @@ For more information, refer to [4xx Client Error](/support/troubleshooting/http-
- `522` - Our edge could not establish a TCP connection to the origin server.
- `523` - Origin server is unreachable (for example, the origin IP changed but DNS was not updated, or due to network issues between our edge and the origin).
- `524` - Our edge established a TCP connection, but the origin did not reply with a HTTP response before the connection timed out.
- `525` - This error indicates that the SSL handshake between Cloudflare and the origin web server failed, either due to a network issue or a certificare issue at the origin.
- `525` - This error indicates that the SSL handshake between Cloudflare and the origin web server failed, either due to a network issue or a certificate issue at the origin.
- `526` - The certificate configured at the origin is not valid.

For more information, refer to [Troubleshooting Cloudflare 5XX errors](/support/troubleshooting/http-status-codes/cloudflare-5xx-errors/).
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ source: https://support.cloudflare.com/hc/en-us/articles/204191238-What-are-the-
title: Threat types
---

Cloudflare classifies the threats that it blocks or challenges. To help you understand more about your site’s traffic, the Type of Threats Mitigated metric on the analytics page measures threats blocked or challenged by the following categories:
Cloudflare classifies the threats that it blocks or challenges. To help you understand more about your site’s traffic, the 'Type of Threats Mitigated' metric on the analytics page measures threats blocked or challenged by the following categories:

## Bad browser

Expand All @@ -14,7 +14,7 @@ Cloudflare's [Browser Integrity Check](/waf/tools/browser-integrity-check/) look

## Blocked hotlink

[Hotlink Protection](/waf/tools/scrape-shield/hotlink-protection/) ensures that other sites cannot use your bandwidth by building pages that link to images hosted on your origin server. This feature can be turned on and off by Cloudflares customers.
[Hotlink Protection](/waf/tools/scrape-shield/hotlink-protection/) ensures that other sites cannot use your bandwidth by building pages that link to images hosted on your origin server. This feature can be turned on and off by Cloudflare's customers.

## Human challenged

Expand Down Expand Up @@ -52,7 +52,7 @@ A /24 IP range that was blocked based on the [user configuration](/waf/tools/ip-

## New Challenge (user)

[Challenge](/cloudflare-challenges/) based on user configurations set for visitors IP in either WAF managed rules or custom rules, configured in **Security** > **WAF**.
[Challenge](/cloudflare-challenges/) based on user configurations set for visitor's IP in either WAF managed rules or custom rules, configured in **Security** > **WAF**.

## Challenge error

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ source: https://support.cloudflare.com/hc/en-us/articles/204964927-How-does-Clou
title: Total threats stopped
---

Total Threats Stopped measures the number of suspicious and bad requests that were aimed at your site. Requests receive these labels as they enter Cloudflares network:
Total Threats Stopped measures the number of 'suspicious' and 'bad' requests that were aimed at your site. Requests receive these labels as they enter Cloudflare's network:

- **Legitimate:** Request passed directly to your site.
- **Suspicious:** Request has been challenged with a [Cloudflare challenge](/cloudflare-challenges/).
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ Once it loads, you can find tabs for **Traffic**, **Security**, **Performance**,
This section outlines the metrics available under each Analytics app tab. Before proceeding, note that each tab may contain:

* One or more panels to further categorize the underlying metrics.
* A dropdown (on the panels top right) to filter metrics for a specific time period. The time period you can select may vary based on the Cloudflare plan that your domain is associated with.
* A dropdown (on the panel's top right) to filter metrics for a specific time period. The time period you can select may vary based on the Cloudflare plan that your domain is associated with.

Below is a summary of each Analytics app tab.

Expand All @@ -60,7 +60,7 @@ Privacy-first Web Traffic Analytics are available on the Pro, Business,
and Enterprise plans.
:::

Analytics are based on Cloudflares edge logs, with no need for third party scripts or trackers. The Traffic tab features the following metrics:
Analytics are based on Cloudflare's edge logs, with no need for third party scripts or trackers. The Traffic tab features the following metrics:

* **Requests** - An HTTP request. A typical page view requires many requests. If you are using Cloudflare Workers, subrequests data will not be visible in zone Traffic Analytics. Instead, you can find subrequests analytics under the **Workers & Pages** tab in the **Overview** section. Refer to [Worker Analytics](/analytics/account-and-zone-analytics/analytics-with-workers/#worker-analytics) for more information.
* **Data Transfer** - Total HTTP data transferred in responses.
Expand Down