SSL / Cloudflare alternatives?

[Rick Mangi]

Hey all,

I recently set up cloudflare to get around the issues with appengine not supporting SSL for custom domains. It all works fine for GET requests but POSTS are resulting in a ton of 500 errors. We engaged cloudflare's tech support and they verified that it's a problem but they can't seem to figure out why it's happening.

Has anyone found any alternative services that offer the same sort of solution that might be more reliable?

Thanks,

Rick

[Jeff Schnitzer]

Eh? We issue POSTs through CF's SSL proxy all the time. What are you
doing differently?

There is this service, which I haven't tried: http://wwwizer.com/

Alternatively, you can run your own SSL proxy servers at
Amazon/Rackspace/Linode/etc. Just keep an eye on traffic.

Jeff

> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/LqFHvhj4YhMJ.
> To post to this group, send email to google-a...@googlegroups.com.
> To unsubscribe from this group, send email to
> google-appengi...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/google-appengine?hl=en.

[Mark Harris]

Our problem is that we have no insight into the problem. We've been working with CF and they have no answers or data for us. But it's easily reproduceable on all manner of client from JMeter to CURL to web browsers to iPhone hitting our REST services. We're looking for options because CF has neither been able to diagnose it, nor give us any ideas how to diagnose it ourselves. We're reaching the point where we need a back-up plan, is all.

Thanks for the response.

M

On Tuesday, May 22, 2012 12:06:32 PM UTC-4, Jeff Schnitzer wrote:

Eh?  We issue POSTs through CF's SSL proxy all the time.  What are you
doing differently?

There is this service, which I haven't tried:  http://wwwizer.com/

Alternatively, you can run your own SSL proxy servers at
Amazon/Rackspace/Linode/etc.  Just keep an eye on traffic.

Jeff

On Tue, May 22, 2012 at 7:48 AM, Rick Mangi <Ri...@broadcastr.com> wrote:
> Hey all,
>
> I recently set up cloudflare to get around the issues with appengine not
> supporting SSL for custom domains. It all works fine for GET requests but
> POSTS are resulting in a ton of 500 errors. We engaged cloudflare's tech
> support and they verified that it's a problem but they can't seem to figure
> out why it's happening.
>
> Has anyone found any alternative services that offer the same sort of
> solution that might be more reliable?
>
> Thanks,
>
> Rick
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/LqFHvhj4YhMJ.

> To post to this group, send email to google-appengine@googlegroups.com.

> To unsubscribe from this group, send email to

> google-appengine+unsubscribe@googlegroups.com.

[Rick Mangi]

Hey Jeff, how did I know you'd be the first to answer ;-)

I can't think of anything we're doing differently. It's totally bizarre, but we see about 5% failure rate on posts. There's nothing magical on our side, it's just rest services with Jersey and Objectify on the backend. We sent the cloudflare guys junit tests showing them what's going on and they see it too. To their credit, they are very responsive and are trying to figure it out, but we're launching in a few weeks here... We can reproduce it in several different ways and there doesn't seem to be any rhyme or reason to it, no patterns of when it happens and when it doesn't. Basically the connection between cloudflare and GAE isn't being made, but only on POSTs, and only sometimes. It happens on 2 different GAE apps for us (we have dev/staging applications, and soon live).

Yeah, setting up EC2/Rackspace nginx servers is our fallback plan but that's yet another point of possible failure and more $. I just wish Google would go ahead and open up SSL for everybody. It seems so basic.

Thanks for the pointer to wwwizer, will check them out. 

On Tuesday, May 22, 2012 12:06:32 PM UTC-4, Jeff Schnitzer wrote:

Eh?  We issue POSTs through CF's SSL proxy all the time.  What are you
doing differently?

There is this service, which I haven't tried:  http://wwwizer.com/

Alternatively, you can run your own SSL proxy servers at
Amazon/Rackspace/Linode/etc.  Just keep an eye on traffic.

Jeff

On Tue, May 22, 2012 at 7:48 AM, Rick Mangi <Ri...@broadcastr.com> wrote:
> Hey all,
>
> I recently set up cloudflare to get around the issues with appengine not
> supporting SSL for custom domains. It all works fine for GET requests but
> POSTS are resulting in a ton of 500 errors. We engaged cloudflare's tech
> support and they verified that it's a problem but they can't seem to figure
> out why it's happening.
>
> Has anyone found any alternative services that offer the same sort of
> solution that might be more reliable?
>
> Thanks,
>
> Rick
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/LqFHvhj4YhMJ.

> To post to this group, send email to google-appengine@googlegroups.com.

> To unsubscribe from this group, send email to

> google-appengine+unsubscribe@googlegroups.com.

[Rick Mangi]

I meant jmeter tests... not junit.