Issues with latest LSCache plugin

badboybackagain

Hi All,

I am facing issues with latest LSCache plugin where I was not able to get the domain key and lots of other issue. I cam across the following article. Anyone facing the same?
https://wordpress.org/support/topic/domain-key-issue-on-v6-2/

slimx

badboybackagain Are you proxied by cloudflare? this is a common headache for the domainkey. I'm not sure why LSCACHE is so stuck on their own little domainkey auth, they should just allow us to use a dns verification.

Quic CDN is also flawed because of this.

xyzulu

I’ve been actively reporting this to Litespeed. They don’t seem to care much. Their "solution" (at least on Enhance OLS) is:
2) Edit the file /wp-content/plugins/litespeed-cache/src/rest.cls.php at line 150, and change // return true; to return true;.
Rolling back to 6.1 will allow you to request a domain key successfully.

Why does this happen.. well.. on Enhance the web server runs in a docker container, while not a proxy as such, it appears to the outside word like you are running behind a proxy.

I think Litespeed should not have "solved their issue" this way... but I'm not sure what is the best way either. Other OLS providers allow persistent configuration so a directive like this one: https://community.enhance.com/d/1105-please-implement-the-possibility-of-configuring-openlitespeed-free-version/15 on Enhance would also probably resolve this LS Cache issue.

Adam

xyzulu Why does this happen.. well.. on Enhance the web server runs in a docker container, while not a proxy as such, it appears to the outside word like you are running behind a proxy.

You should still see the "real" IP because the connection is NAT'd rather than proxied. Are you also using Cloudflare or a similar CDN?

xyzulu

Adam Are you also using Cloudflare or a similar CDN?

Yes we are. I'm not blaming Enhance here.. rather Litespeed.. but.. I can't see them ignoring all "customers" behind Cloudflare.. in any case.. I usually just work around the issue rather than burn time on trying to get them to take notice and resolve.

RomanTheRizz

Months later this issue still exists. Though enabling Cloudflare maintenance mode allows you to get the domain key as soon as you disable it, the problem comes again.

All Quic IPs can be whitelisted in Cloudflare WAF but that is time-consuming and hell if you have many websites running on Cloudflare.

JohnB

Litespeed's motto: speed, ~~security~~, ~~quality~~ btw buy a enterprise license

RomanTheRizz

JohnB So true. I am currently on Cyberpanel and planning to come on enhance. How's the panel support between?

Cyberpanel was free when I started 3 years back. Now, it is becoming a freemium model. Have 5 tabs of backups (2 free ones), and 3 paid ones. 1 click WordPress which is free if you create a website but when you click the '1 click wordpress' it takes you to the paid plans. So much confusion now. The panel 2 years back was great and didn't suck.

A recent update made CSF uninstall and you can't install it again otherwise the panel becomes inaccessible. Free backups are buggy with no retention features (making my local drive go out of space). Deleted but still, it performs backups.

JohnB

RomanTheRizz The panel 2 years back was great and didn't suck.

The interface maybe didn't suck but they have a history of vulns that let an unauthenticated attacker get root access to the hosting server. Seriously just a couple of post requests and root access. They would fix it and then another would be found.

These idiots also said I need to buy a support plan when I tried to REPORT a serious security issue I found just when testing the panel...

Anyway I can say that Enhance support is very good and prompt. There is no "paid support" like Cyberpanel. A lot of companies (especially Cyberpanel) will "ship the feature on time and fix the backend later" which adds up and creates major problems later. It seems Enhance is taking the time to do things right the first time which is why so many planned features are behind schedule.