4 ms·
Hi, I run neocities.org. If you're hosting other people's content, DigitalOcean instances will only get you so far. You really need to be a proper ISP and have
by kyledrake 10y ago
Hi, I run neocities.org.
If you're hosting other people's content, DigitalOcean instances will only get you so far. You really need to be a proper ISP and have control of things like the IP addresses to make sure that these abuse reports go to you directly, and not to your upstream provider that will eventually get sick of dealing with you and shitlist you. We used to use DO for the proxy servers, but learned quickly that this wasn't going to work long term. Throwing CloudFlare in front of it as we see here doesn't solve this problem.
Having control over your IP addresses adds a ton of bureaucratic and technical complexity and leaves out a lot of "cloud providers", including most of the big ones like AWS and Google Cloud. I really have no idea how you could run a real ISP on top of these cloud services. Without control over the reporting mechanism, there's no way to automate the process or streamline it. And you'll be at the complete whim of your upstream cloud provider.
Only after we started down the path of IP control did Neocities stop having problems with the occasional abuse reports threatening to take down all of our sites. It took a long time to find the right partners to do this with, but we finally did.
You can blame the NRA or DigitalOcean or whatever, but honestly at the end of the day, you're going to get a bunch of these from every random organization. Today it's NRA, tomorrow it's MLB because someone is using your web hosting to publish a pirated baseball stream. This isn't exceptional at all - Google probably gets tens of thousands of reports like this a day. The difference is that they control their infrastructure, so they decide whether a site gets blocked or not. As a web hosting provider, that's the position you want to be in.
I'm available for consulting for anyone that wants to setup a web hosting platform that can resist problems like this. We also now own an IP block, and are willing to discuss providing some IP addresses for groups like surge.sh or anyone that does web hosting of this nature. I can make sure the abuse reports go directly to you, and if they decide to try to go upstream and piss off the provider, they go through me instead of indifferent abuse guy at a cheap VPS provider that assumes you're running a hacked wordpress blog.