Cloudflare blocking users

[ChetterHummin]

Wondering if anyone else is seeing issues with websites such as asda.com and currys.co.uk this week? Having reports of these websites blocking staff and it seems related to Cloudflare.

 

I am assuming it is due to the fact the schools all share a public IP address. Have tried reaching out to the website owners individually but as you can imagine, Asda support isn't geared towards website administration...

[psydii]

No complaints from colleagues, but I've been hitting the cloudflare "are you a human" screen most days when trying to access edugeek.

[Davit2005]

1 hour ago, ChetterHummin said:

Wondering if anyone else is seeing issues with websites such as asda.com and currys.co.uk this week? Having reports of these websites blocking staff and it seems related to Cloudflare.

 

I am assuming it is due to the fact the schools all share a public IP address. Have tried reaching out to the website owners individually but as you can imagine, Asda support isn't geared towards website administration...

Does the LEA provide your Internet, if so might be worth specifying the supplier.

[ChetterHummin]

Have some more information. The schools are going through Netsweeper for filtering- have spoken to our provider and sounds like Cloudflare isn't playing nice with the deep inspection. They've managed to get a workaround in place for this and escalated their end.

[Patrick]

Yep we've had this. Had issues like this since we moved to Netsweeper cloud, just one of those things I suppose. 

[sigma]

Us too. Started last week.  Another symptom for us were associated CSAM blocks (never had them before), which were FP's.

 

 

[tom_newton]

I wonder if this has to do with Encrypted Client Hello... altho asda.com doesnt seem to have ECH turned on...

[PaddyNewman]

Its to do with ciphers and some proxies when using MITM throwing ciphers that are unexpected/not what the browser initially wanted to connect with. Weird, must have toggled something last week.

[sigma]

Cloudflare accidentally DDoSed themselves.
https://blog.cloudflare.com/deep-dive-into-cloudflares-sept-12-dashboard-and-api-outage/