3 ms·
True, and while Cloudflare is a great company, putting all our eggs in one basket isn't particularly wise. Not saying that this'll happen, but we've seen "great
by AgentK20 10y ago
True, and while Cloudflare is a great company, putting all our eggs in one basket isn't particularly wise. Not saying that this'll happen, but we've seen "great companies" that were great while there was strong competition, but eventually when they became the monopoly began to strangle out anything that they were against. Protection providers like Cloudflare would have enormous power to simply kick out a user for being "too costly to host," like Akamai did to KrebsOnSecurity, and then you'd get destroyed by attacks.
- dx034 10y agoKrebs didn't pay akamai. It will be similar on cloudflare. If you're on a free plan, they will have a limit on what they will defend for you. Layer 3/4 and 7 attacks are only covered in business plan, but if you use this plan (which likely makes sense for many due to other features), I'm pretty sure they won't throw you out. Mitigating DDos is one of the main selling points nowadays. That's why OVH wrote so much about the huge attack they defeated (and they didn't name the impacted clients), Cloudflare offered Krebs to host him (he refused) and other providers add scrubbing centers. I actually think it's rather cheap to defend against DDos if you're a small company. Large companies will have it harder as they have typically more complex requirements and cannot just shift everything behind cloudflare or similar services.
- dorianm 10y agoThe CEO of Cloudflare talked about it at Black Hat[1], and for instance they protected an Hong Kong voting website for free while it was under heavy DDoS attacks. [1]: https://www.youtube.com/watch?v=SWFX-zEYwN0 https://www.youtube.com/watch?v=SWFX-zEYwN0