inga-header-cloudflare — Heiko Zimmermann

Inga (Inspect Network, Gateways, Addresses) -- HTTP Header & Cloudflare Inspector.

Inga watches the requests of the tab you are on and shows what the browser already knows about them:

• Every captured request of the tab with its request and response headers, filterable, and copyable per row or as a whole view.
• Cloudflare detection for the selected request: ray id, data centre, cache status and age, browser isolation, whether the server address falls into Cloudflare's published ranges, time to first byte, and the page's negotiated protocol (h2, http/1.1).
• A toolbar beetle that tells the state at a glance: orange for a page served through Cloudflare, red for one that is not, grey when nothing was measured yet. The badge carries the time to first byte; the tooltip a one-line summary.
• An options page for the details: theme, timing display on or off, collapsing repeated headers, alphabetical sorting.

Nothing leaves your browser on its own. Two actions exist that you trigger yourself, and both are plainly visible:

• The Cloudflare trace: with an off-by-default setting enabled, a click on the word "cloudflare" fetches /cdn-cgi/trace from the page's own origin -- scheme, host and port only, never the path or query of the page you are on.
• The external check menu: a click opens SSL Labs, Mozilla Observatory, DNSViz or Verisign's DNSSEC debugger in a new tab, with the page's hostname in the tool's URL. The menu shows the hostname before you click.

No analytics, no accounts, no remote code. Captured headers live in the browser's session storage and die with the session.