At Foxglove, we leverage Vercel to host our marketing website and Cloudflare to reap other benefits like URL rewrites. This allows us to host different parts of our website from separate repositories—for example, we generate our homepage and API docs from separate projects.

When introducing Cloudflare in front of Vercel, however, Vercel returned an “Invalid Configuration” error for our domain. Ignoring this problem could lead to an expired TLS certificate and interrupted service for our users. Unfortunately, the only solution offered was to point our DNS records to Vercel directly – something that would require us to move away from Cloudflare altogether.

Vercel error

Maintaining HTTPS protection in Cloudflare

Contrary to what many online resources and the Vercel docs themselves advise, you should not resolve this issue by disabling Always Use HTTPS. We felt it important to maintain automatic HTTPS protection across our entire domain and redirect all HTTP requests to HTTPS.

Cloudflare HTTPS

Understanding the role of ACME

Both Cloudflare and Vercel utilize the ACME protocol—with SSL providers like Let’s Encrypt—to issue certificates. To validate domain ownership, the protocol sends an HTTP (not HTTPS) request to /.well-known/acme-challenge/\<id> on your server.

It's vital that the HTTP URLs matching this pattern are delivered to your origin server and are not redirected to HTTPS. Instead of setting up Cloudflare page rules exempting this URL pattern from HTTPS, as previously required, you can now rely on Cloudflare to correctly handle ACME HTTP requests by default, without additional configuration.

The example below shows two requests—one being redirected to HTTPS, and the second one being passed through to the Vercel origin, without additional configuration:



Resolving the “Invalid Configuration” issue

Unfortunately, even after attempting various page rule modifications, we found that Vercel was still unhappy. To satisfy Vercel, we ultimately had to set the SSL/TLS encryption mode in Cloudflare to Full or Full (strict), and no higher.

Cloudflare TLS Mode

We initially had this set to Strict (SSL-Only Origin Pull), but this proved incompatible with Vercel. The Strict (SSL-Only Origin Pull) setting transforms all requests to the origin (Vercel) from HTTP to HTTPS—even if the request to Cloudflare is using HTTP. This transformation occurs silently, causing Vercel to disregard the request. By setting it to Full (strict), Cloudflare will automatically exempt ACME requests from the Always Use HTTPS setting and forward them through to Vercel unmodified.

The Vercel docs suggest setting the SSL/TLS encryption mode to Full, but have not been updated to explicitly mention avoiding the new Strict (SSL-Only Origin Pull) option as of this time.

Check out the the two example HTTP requests below to understand the effects of modifying this setting. The first request returns various Content-Security-Policy and other headers from Vercel’s CDN, while the second responds with fewer headers, signifying that it's reached Vercel’s ACME validation endpoint:



In summary, if you're looking to make Vercel and Cloudflare play nicely together, avoid setting your Cloudflare SSL mode to Strict (SSL-Only Origin Pull). With this one essential configuration detail, you can prevent any unnecessary interruptions to your services.


Foxglove Studio’s redesigned navigation makes it easier than ever for you to use Studio’s information-rich interface and explore your robotics data.

We’ve reorganized screen space to make it easy to zero in on the information that matters most to you. The new top navigation bar summarizes data source information and highlights quick actions like adding a panel, opening a data source, or choosing a layout.

Most noticeably, we’ve split the original sidebar menu into two panes – one on either side of the layout–  for more efficient analysis. Whether you want to view your data source's topics, set variables, or configure panel settings, you can use these collapsible sidebars to inspect different aspects of your workspace simultaneously.

top nav breakdown

We hope these changes make your development workflow even more intuitive. To share feedback or ask questions, feel free to contact us directly or join our Slack community for support.


Foxglove Data Platform now supports metadata records and attachments for MCAP files. Once you import an MCAP file into the platform, you can now go to the recording's details page to view its metadata or download its attachments.

Metadata records store contextual information about the entire associated recording – data like the robot ID, hardware details, and operating location. Attachments, on the other hand, are tied to specific timestamps in the recording and contain auxiliary artifacts like maps, calibration values, and system log files. Together, metadata and attachments can provide roboticists with a more holistic view of what their fleet encounters on its various excursions.

metadata and attachment tabs for a recording

Use the Foxglove web console to export an MCAP file with all its original metadata and attachments included, or you can choose to download individual attachments for separate analysis:

downloading a recording or its attachments

Stay tuned

With metadata and attachments support, we hope all Foxglove users can now get a more comprehensive understanding of their team's MCAP data.

If you have questions or feedback about Foxglove's MCAP support, don’t hesitate to contact us directly or to join our community Slack channel for live support.


Announcing MCAP Metadata and Attachments Support

Stay tuned

Read more:

Ready to try Foxglove?