I just ended up buying a VPN to finish submitting a tournament that had minor registration issues from my vacation in Mexico; it would be nice if logged in users could access ratings.uschess.org from anywhere.
What are the reasons they block access from outside US?
It may be the default settings on Azure, Iâve filed a ticket on thisâtwice.
Looks like the country problem may have been a Cloudflare issue, I think itâs open world-wide now but I have no way to test or confirm that except by reports from members and TDs. If we start seeing DDOS attacks we may have to do something about those, such as blocking specific countries.
OK, I passed your note on to Leago.
Azure or Cloudflare? Usually if Azure server, the firewall is on Azure itself. It can be in Cloudflare, but having server and firewall at the same network usually better (faster).
Cloudflare is our caching server.
This is just an http bug. Change your link to https instead of http and it fixes
Nope. Without a vpn I just get the image above about connecting to the API from the https link. With a VPN it works fine.
If CF is the caching server, at some point in the future US Chess should redirect the MSA link of Players to current MUIR link. It does not take lot of time to do that, and if the MSA server will be off forever, it will still redirecting to the new link. Tons of MSA link (players profile) in the internet already all round the places.
Yeah, thatâs the plan for when MSA shuts down for good.
Our IT director reports he is able to access it from foreign countries, Iâm not sure why you canât.
Have others tried this? I donât have a way to test it. (Obviously it works from Canada, since the developers are in Canada.)
Itâs going to be country specific, apparently. Using whatever NordVPN has, hereâs what I see:
US - Works
UK - Works
Mexico - Does Not Work
Germany - Does Not Work
Canada - Works
France - Does Not Work
Japan - Works
Indonesia - Works
Australia - Works
Italy - Works
Still testing but the issue does not seem to be worldwide.
âŚthereâs a Cloudflare âclick here to prove youâre humanâ before all of the Does Not Work results.
Thanks, Iâve passed those along.
It looks like that âhumanâ test is the problem, the API doesnât know how to fake that. (itâs probably possible, hackers do it.)
We may have to update the Cloudflare settings specifically for the MUIR URLs, but that also opens a big door for bad actors.
Emanuel says heâs made a change at Cloudflare which should fix this, letâs just hope it doesnât open the door to a hacking attacks.
It seems to be working from Mexico now, which probably closes the issue out.
I donât know how Emanuel managed to take Cloudflare down with those changes, but he seems to have managed to crash the internet.
the change might make CF in infinite loop
