Frequently Asked Questions
1. Why Can't My Plugin Connect Successfully to the Site?
Ensure the plugin is correctly installed. If you have upgraded the plugin, make sure the old plugin was completely uninstalled before installing the new one.
Ensure you have accurately followed all the instructions in the integration guide, including writing all the directives into the reverse proxy server (gateway) configuration file and completing the required operations.
Make sure you have accessed the protected path through a browser.
Ensure the server with the installed plugin can perform DNS resolution. If the server reports an error like “detector.riveryun.com could not be resolved,” it indicates a domain name resolution failure, and you need to change the DNS address configured on the server. Refer to Linux Plugin Version Access Guide (OpenResty) > 4.1.1 Backup and Modify Server Configuration File or Windows Plugin Version Access Guide (OpenResty) > 4.1.1 Backup and Modify Server Configuration File section, and modify the DNS address in the resolver 114.114.114.114 ipv6=off; directive on the server, then restart OpenResty.
2. How Can I Use Different Protection Schemes on Different Paths?
Version 1.5.5 does not support this feature yet.
3. For Full-Site Protection, Can I Only Check Requests from Specified Paths or Source IPs?
Log in to the River Cloud Management Interface using your registered account, go to Configuration Management > Site Management, and click the Edit button for the site, as shown below.
In the edit window, under Whitelist Configuration, turn on Enable Path Whitelist and Enable IP Whitelist, and then use regular expressions to whitelist specified paths and source IPs, thereby achieving checks only on specified target requests. As shown below.
In the above example, the expression in the Path Whitelist means: Only requests with the path /login.jsp will be checked for security protection, and other path requests will be allowed through. Similarly, requests from the source IP 10.10.10.10 will also be allowed through.
💡 Tip:
The path whitelist and IP whitelist have a logical OR relationship.
The IP list supports IPv4 subnets, such as 10.10.8.0/24. However, it does not support IPv6.
4. What Happens if the Same Content is Entered in Both the Whitelist and Blocklist?
The whitelist has a higher priority than the blocklist. When their content is the same, for example, if /login.jsp is entered in both the Path Whitelist and Path Blocklist, only the Path Whitelist will be effective. The IP Whitelist also has a higher priority than the IP Blocklist.
5. Will Site Access Be Affected if River Cloud Cannot Connect?
No, it will not be affected.
When using plugin or CNAME access, if the plugin cannot communicate with River Cloud, the traffic visiting the website will be directly forwarded to the origin server. This function is known as the automatic escape feature.
As for sidecar access, due to its working mechanism, it will not affect site access under any circumstances.
6. How Many Sites Can I Create After Registering a Tenant?
A new tenant who has not purchased any modules, traffic packages, or storage space is a test tenant and can create up to 3 sites.
Once any module, traffic package, or storage space is purchased, becoming an official tenant, you can create up to 20 sites.
7. What Should I Do if My Browser is Blocked Despite Having Katalon Recorder or Selenium IDE Plugins Installed but Turned Off?
Close the browser tab that was blocked, open a new tab, and then visit the site again to open it.