Shields: Badge request: Cloudflare

[planetahuevo]

:clipboard: Description

• Which service is this badge for: Cloudflare
• What sort of information should this badge show?
  If the website is using Cloudflare CDN or not.
  CloudflareCDN | active
  CloudflareCDN | offline

:link: Data

Where can we get the data from?

• Is there a public API?
  Yes, there is.
• Does the API requires an API key?
  Yes.
• Link to the API documentation.
  https://api.cloudflare.com/

I have limited technical knowledge so I am not sure if the API allows to create the badge I am looking for, but I can see the documentation is huge and I am sure some other badges could be created from this one.

They also have this badge:
https://www.cloudflare.com/logo/
"Dynamic Web Badges
To place these web badges on your website, copy the code next to the badge you want, and paste it where you want to put it on your website. Use the drop-down menu to choose the color you want before copying.

How Is It Dynamic?
Dynamic web badges change depending on the status of your website on Cloudflare. If it is active on Cloudflare, the cloud icon will be orange. If it is not active on Cloudflare, the cloud icon will disappear."
Which would be great to have a shield design for the same thing.

Thanks!

[paulmelnikow]

Hi! Thanks for the suggestion. Can you explain a little more about why this badge should be implemented and how it would be used?

[planetahuevo]

I am creating some reports for websites, and there is a section for security, current status and performance.
I am using a lot of the badges for that (I just discover this and I am amaze with the project! :)
Detecting the cloudflare on the report with a badge will make it really easy.
It also can be used on the websites, within the admin part of it to have a quick look of the status of other stuff that is important for the website.
I have much more ideas of other services but I was looking into the code on how to create them and I have no idea how to start coding that (I am not a developer, just know some few things).
So I thought I could help the project suggesting and testing things. :)

[paulmelnikow]

Thanks for explaining. That's super helpful!

We welcome all types of contributions. Improving documentation is an especially good way to help!

[calebcartwright]

It looks like the API requires account specific cred info to be sent with the request which could make this one tricky outside of self-hosted Shields instances.

https://api.cloudflare.com/#getting-started-requests

Requests
Requests must be sent over HTTPS with any payload formatted in JSON. All requests must include both and headers to authenticate. Requests that use can use that instead of the Auth-Key and Auth-Email headers.

Name | Format | Description
-- | -- | --
API Key | X-Auth-Key | API key generated on the "My Account" page
Email | X-Auth-Email | Email address associated with your account
User Service Key | X-Auth-User-Service-Key | A special Cloudflare API key good for a restricted set of endpoints. Always begins with "v1.0-", may vary in length.

[planetahuevo]

Oh, not sure I understand that completely but I found also this one:
https://www.cloudflarestatus.com/api
it is a different thing, as it will be just a badge for the status of their services on different points of the world, but could be a nice badge too.
Which is really a statuspage badge, and maybe that is a complete different thing.

[Prouser123]

We can't really implement those 'using Cloudflare' badges, but we could have, for example, a CloudFlare category and implement some monitors from CloudflareStatus, like the CDN regions or various core CloudFlare features.

[ghost]

@planetahuevo you wouldn't happen to be leveraging the fact #1880 added cookies to hundreds of thousands of websites and using it to find out who might not be in compliance with GDPR cookie consent now would you? FYI: #2986

[planetahuevo]

I do not understand what do you mean at all. Can you rephrase it?
Thanks

[ghost]

It's all good. Just trying to connect some dots that probably aren't there. 👍

[calebcartwright]

Hi @jhabdas. We'll be happy to discuss your concerns with CloudFlare over on #2986.

However, please do not attack other members of the Shields community, or accuse them of malicious intent, especially without any supporting evidence.

I'm going to mark these comments as off topic, and we can continue the dialog in the other thread

[ghost]

Hi there.

There's a public API to detect Cloudflare. See this code as an example.

---

Take a look:
Problem with CloudFlare
General problem with Cloudflare's MITM attack on the Internet
Why Cloudflare?