3 ms·

Interesting choice of an example. I'll tell you the actual reason we don't let most customers block countries entirely: we don't want to help facilitate the bal

Interesting choice of an example. I'll tell you the actual reason we don't let most customers block countries entirely: we don't want to help facilitate the balkinazation of the Internet. Cutting an entire country's population from being able to access some content is, per se, a bad thing. You're correct that the challenges we do allow for all customers are more work for us. However, they resolve the (largely bogus) perceived security risks some people cite for blocking whole countries while only minorly inconveincing legitimate users from those countries. This was a decision I made early on in Cloudflare's history, anticipating someday we may operate at a scale where it would matter. And, now that we do operate at that scale, I'm glad I did or I fear we would be a force in carving up the Internet into increasingly regional pockets of information. Matthew Prince, cofounder & CEO, Cloudflare

thinkMOAR 10y ago
Aha the CEO, what a pity i noticed it so late, I hope you actually do something about their non stop posting of CF blog content here for advertisement. That is careful or convenient use the word 'most'; But it is not an answer to the question that has been asked. And you still offer the feature (if paid for), so saying you do not want to facilitate balkanisation and still having the feature, seems a bit contradicting to me. Will you be removing this option/feature from your services totally? Currently it IS possible, and CF lets everybody do it, as long as they pay for the enterprise membership. At least that is what understood from CF admin panel, i assume the information it displays is correct. And your reply lacks any proper reasoning why it costs serious money to block while it technically requires less resources, meaning less costs, that was the actual question. "Cutting an entire country's population from being able to access some content is, per se, a bad thing." Yes, to filter solely based on the origin, race etc of a person is even (often) unlawful(, some people even call it racism, though i think we are belong to the same human race, homo sapiens sapiens.) Though we both know we are not talking about human users, that is not the reason why people put their site behind cloudflare? Nobody generally complaints about having too many legit visitors on their website..... You want to use this feature when under DDOS (been target of 'quite' a few). And when you see 99.999% bogus crap traffic from a country (or countries; which normally doesn't give you any site visitors) give me one real reason why not to block it (be it temporarily), and for allowing CF to keep passing through requests from BAD hosts? I will just leave it at this before i catch myself writing another rant. Though i honestly and respectfully hope, you will think about taking more responsibility about the junk flowing through your network and the amount of HN posts for marketing purposes. thinkMOAR, Internet Surfer, RBL operator & owner, Systems Engineer, Network Engineer, SysAdmin, Programmer, Webdesigner, Husband, Brother & Son.

thinkMOAR 10y ago

Aha the CEO, what a pity i noticed it so late, I hope you actually do something about their non stop posting of CF blog content here for advertisement. That is careful or convenient use the word 'most'; But it is not an answer to the question that has been asked. And you still offer the feature (if paid for), so saying you do not want to facilitate balkanisation and still having the feature, seems a bit contradicting to me. Will you be removing this option/feature from your services totally? Currently it IS possible, and CF lets everybody do it, as long as they pay for the enterprise membership. At least that is what understood from CF admin panel, i assume the information it displays is correct. And your reply lacks any proper reasoning why it costs serious money to block while it technically requires less resources, meaning less costs, that was the actual question. "Cutting an entire country's population from being able to access some content is, per se, a bad thing." Yes, to filter solely based on the origin, race etc of a person is even (often) unlawful(, some people even call it racism, though i think we are belong to the same human race, homo sapiens sapiens.) Though we both know we are not talking about human users, that is not the reason why people put their site behind cloudflare? Nobody generally complaints about having too many legit visitors on their website..... You want to use this feature when under DDOS (been target of 'quite' a few). And when you see 99.999% bogus crap traffic from a country (or countries; which normally doesn't give you any site visitors) give me one real reason why not to block it (be it temporarily), and for allowing CF to keep passing through requests from BAD hosts? I will just leave it at this before i catch myself writing another rant. Though i honestly and respectfully hope, you will think about taking more responsibility about the junk flowing through your network and the amount of HN posts for marketing purposes. thinkMOAR, Internet Surfer, RBL operator & owner, Systems Engineer, Network Engineer, SysAdmin, Programmer, Webdesigner, Husband, Brother & Son.