Cloudflare protected webhook endpoint

Im quite new here and not that familiar with Monzo’s API’s. The process of registering a webhook and receiving data on that specified endpoint is fairly simple, however I’ve realised that if the endpoint is protected by Cloudflare, then the webhook seems to just not work, as in, it looks like no request attempt is even made, but as soon as I turn the “proxy” option off, the requests come through, I have checked Cloudflare itself and it doesn’t seem like any requests are being blocked, so this leaves me wondering if Monzo denies usage of services like Cloudflare?

Any help or insight on this would be appreciated.

Do you have any WAF rules set up? Nothing under the security logs?

It would be strange if they were to detect it was behind Cloudflare because they’ve have to do a DNS lookup first specifically to check if it’s a Cloudflare IP. Can’t see why they would need or want to do this, your site using Cloudflare would have no impact on them.

Just checking do you have SSL set to be full? As I found that to be an issue in the past.

Can you also CURL the hook yourself?

Thankyou @WhyAydan & @Orinoco for taking your time to reply, turns out it was Cloudflare blocking the requests as it detected them as “bots”, bit stupid of me to miss that as I wasn’t looking in the right section on the portal, anyhow, it’s all sorted now :sweat_smile:

4 Likes