Need help with rule to bypass challenge/user interaction for API service

General Rules
1

What is the name of the domain?

What is the issue you’re encountering

We have a push notification service that is used by our web app and runs on a subdomin. The web app uses Comet in Javascript (long polling) to maintain an open connection with the push service so it knows when to refresh the browser.

The connection is reconnected when the browser times out and drops it.

We’ve gotten some customer complaints that their browser is no longer refreshing and I believe it’s because CF thinks the constant reconnects is a bot and is presenting the challenge.

I’ve turned off Proxy on that sub-domain for now.

What steps have you taken to resolve the issue?

I’ve tried creating a Page Rule with the following options:

Browser Integrity Check: Off,
Web Application Firewall: Off,
Security Level: Essentially Off,
Cache Level: Bypass

2

Do you see the challenge interaction for the particular scenario in the Security Events? If not, then it is most likely not caused by the challenge. If you do see it, you can try configuring custom rules with a “Skip” action for that URL.