3 ms·
apparently not a permanent bricking, you just have to call cloudflare and get the keys to unbrick. >>The second measure is the addition of a forceful configura
by rolph 5y ago
apparently not a permanent bricking, you just have to call cloudflare and get the keys to unbrick.
>>The second measure is the addition of a forceful configuration on all servers located in Ukraine, Belarus, and Russia, to automatically brick in the case of a power loss or internet connection disruption.
"All data on disk is encrypted with keys that are not stored on site. Bricked machines will not be able to be booted unless a secure, machine-specific key that is not stored on site is entered." - explains Cloudflare<<
so this seems to say that when a RU or a UKR server powers down or no longer has a heartbeat the server is encrypted, and you need to go through whatever is required to get the keys from cloudflare
- jaynetics 5y agoThey mean their own local cloudflare servers, which might contain sensitive data of their customers. It's more clear in CFs own blog: > If any of our facilities or servers in Ukraine, Belarus, or Russia lose power or connectivity to the Internet, we have configured them to brick themselves. https://blog.cloudflare.com/steps-taken-around-cloudflares-services-in-ukraine-belarus-and-russia/ https://blog.cloudflare.com/steps-taken-around-cloudflares-s...
- rolph 5y agothat gives the impression of a data center or ISP , with a "cloudflare box" or two on the racks. that sounds reasonable. if someone attacks or disrupts a cloudflare server from the rest of its cluster, its goes into "panic mode" and encrypts, then a re-key must occur before the box is booted.