13 ms·

Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

• bithavoc 4y ago
  Maybe @jgrahamc can help
• cloudflaresucks 4y ago
• nonrandomstring 4y ago
  This sounds like a phishing expedition to provoke you into rash action. Pause. Take a breath. Don't click anything. Try to contact the company via a safe secondary channel like landline telephone and start by politely verifying if they've contacted you by email for any reason in the recent past. If it really is from Cloudflare then they are trash beneath contempt and you should extricate your interests as fast as humanly possible.
  • malikNF 4y ago
    It is actually from cloudflare. When I stopped receiving emails I checked my cf dashboard and figured something was wrong. So I opened a support ticket and someone from their support team closed the ticket and said their safety team will respond to me. Few mins later I got an email from them with the content in the original post.
    • nonrandomstring 4y ago
      You're absolutely sure right? You responded by some other means than clicking a link or hitting reply on an email? Sorry to put my forensic "fascist hat" on, I know you're not an idiot, but it's so easy to get into a tunnel vision state of action when your emotions are provoked. That's what clever account takeovers are worded to do. If it seriously is Cloudflare then the wording of that email you posted is grotesquely unprofessional.
      • gjs278 4y ago
      • malikNF 4y ago
        haha yes, I am the one who initiated the communication. Just to be double sure, just checked the email header on gmail, gmail seems to agree the DKIM and DMARC are all good.
  • agentdrtran 4y ago
    All of Cloudflare's actual abuse emails look like phishing emails. They told me to email credit card and my Gov't ID in plaintext to them.
• teraflop 4y ago
  > Like what am I even supposed to do here ? Not meaning to diminish your (quite reasonable) frustration, but is Cloudflare preventing you from transferring your domain somewhere else?
  • malikNF 4y ago
    I think this might be the best solution in this situation, ill wait for a few hours and see if anyone from cf could help me out with this, and if not use a different service provider. I know @eastdakota mentioned he has a script that gets triggered when someone mentions cloudflare on HN, hopefully this will help resolve this issue.
  • RainaRelanah 4y ago
    It's pendingdelete, so they're flat up holding it hostage until it's publicly available for anyone to register.
    • ipaddr 4y ago
      Can you still force a transfer in pendingDelete from another registrar?
    • 5ESS 4y ago
      That’s terrifying. By far the worst part of this. If they ban somebody for TOS violations that is fair, but preventing people from transferring out their domain and setting it to pendingdelete is really insidious. What they are doing is akin to stealing anyone domain name permanently with no recourse. This may be grounds for a lawsuit.
      • withinboredom 4y ago
        It's abuse and theft, plain and simple. Replace "domain" with literally any physical object. You can't just take someone else's shit, no matter how high-and-mighty you think you are (excepting governments, of course).
        • 4y ago
• RainaRelanah 4y ago
  Did you have any other domains on the account, or shared access with other accounts? I hate how legal has forced every trust & safety team to just blanket reply "You were banned. We won't tell you why. We won't overturn. Go away." It's absolutely impossible to contest without public attention or legal action, and is often just a simple mistake.
  • Avamander 4y ago
    > often just a simple mistake More often than not it's not a mistake. Very simply put, fighting abuse is very asymmetrical and a lot of the approaches just even the playfield. They will make you put in more effort for them to put in effort. Unfortunate, but the only way it's sustainable.
    • shkkmo 4y ago
      > More often than not it's not a mistake. So? A false positive rate of 50% is wholey unacceptable when banning people from critical online infrastructure. > Unfortunate, but the only way it's sustainable. This common talking point is just BS apologetics. There is a long history of ways to manage disputes without sending such useless explanations. These companies are just to cheap or lazy to bother.
      • Avamander 4y ago
        > A false positive rate of 50% is wholey unacceptable when banning people from critical online infrastructure. Where'd you get that number? > There is a long history of ways to manage disputes without sending such useless explanations. Sure, the legal system.
        • shkkmo 4y ago
          > Where'd you get that number? Your use of the phrase "more often than not" applies up to 50% and is thus meaningless given that such a false positive rate is unacceptable. > Sure, the legal system. It's pretty hard to file a legal claim without facts to contest...which is precisely the point.
• xxdesmus 4y ago
  Hello, I'm the Head of Trust & Safety. Please forward me the email? This is very likely legitimate and from our team, but I'd like to confirm. justin@ cloudflare.com
  • heretogetout 4y ago
    If malikNF consents, would you share your findings here? It's concerning you can be banned without so much as a brief sentence explaining why.
    • malikNF 4y ago
      I just forwarded the email to them. I will update what happens once its sorted out. I am hoping this is a mistake on my end, because it would suck so much to move all the stuff from cf, this is pretty much the ONLY issue I have had with them in the last 6ish years of using and recommending them to everyone.
    • ncallaway 4y ago
      Didn’t they get exactly a “brief sentence explaining why” in: > Your account violated our terms of service specifically fraud
      • actionablefiber 4y ago
        That's not really an explanation. An explanation would be something like, "we discovered that you (lied about your identity/used your website to organize or commit criminal activity/etcetc.) - literally anything that gives the user enough context to figure out if this was an accident or a misunderstanding and defend themselves.
    • malikNF 4y ago
      If anyone from CF wants to explain what happened, I give my consent to disclose what exactly went wrong. Provided no personal info is posted.
  • malikNF 4y ago
• 0172 4y ago
  I had a similar experience transferring a domain I registered with Namecheap to Cloudflare. They did not let me add the domain at all citing similar reason. Perhaps the previous owner of the domain was abusing it.
• sascha_sl 4y ago
  I know this sounds very cynical, but there's something funny about a company doing this automated trust and safety with zero recourse spiel while being entirely okay with hosting sites where people are bullied into suicide because we can't just deny service to technically legal websites as a pseudo public utility. Pick a lane.
  • deleted 4y ago
    [deleted]
  • cookiengineer 4y ago
    ^ kinda right, you know. As long as kiwifarms and others are hosted behind cloudflare, this statement is true.
  • pessimizer 4y ago
    Good point, but fraud and theft are different than being unpleasant or cruel.
    • viraptor 4y ago
      I'd imagine both fall under "trust and safety". And let's not water it down - targeted harassment is not "being unpleasant".
      • izzydata 4y ago
        Both might be considered morally wrong, but only one seems illegal.
        • viraptor 4y ago
          I assure you, targeted persistent harassment is in fact not legal in most countries. With caveats for public figures and failing enforcement.
          • Vecr 4y ago
• herpderperator 4y ago
  > Your account violated our terms of service specifically fraud. Honestly, this phrase is raising phishing alarm bells in my head, though xxdesmus said it's `likely legitimate`. The punctuation and capitalization is lacking, and really makes it sound... off. Edit: I originally thought this was an email, but upon reading the post again it sounds like a response to OP's support ticket. There's a lot less effort involved in responding to a support ticket or chat message than the effort involved in writing up email templates, so my point doesn't quite apply here.
  • janejeon 4y ago
    Yeah, the lack of comma, and the phrase "specifically fraud", are extremely alarming to me. I understand that not all developers are native English speakers, but far more scammers are non-natives than devs are; not to mention, there are likely checks in companies like this to proofread any text before it goes "live".
    • viraptor 4y ago
      Meh, it's not like native speakers use perfect grammar. People who learned English properly are actually better at punctuation and spelling than most native speakers in my experience. And the transactional messages often get only as much review as any other PR. There's some signal here, but not much.
    • dylan604 4y ago
      >to proofread any text before it goes "live". Not on the internet I use. Even the old school newspapers are failing basic grammar things that anyone calling themself an editor would catch. Mainly, because they are not getting edited at all. Reports get entered into a CMS, a publish button is pressed, viola, first to publish! Yay!!! Only, in the rush, basic grade school grammar is non-existent and makes my brain slow down, and decipher what was meant, and makes me no longer want to keep reading.
      • wyldfire 4y ago
        > Even the old school newspapers are failing basic grammar things that anyone calling themself an editor would catch. I've seen articles by the AP (!!) that clearly have not gotten enough scrutiny (typos, etc). > Reports get entered into a CMS, a publish button is pressed, viola, first to publish! Publishing articles is no time for stringed instruments [1]. Unless maybe you meant it as some kind of fanfare upon publication? :P [1] https://en.wikipedia.org/wiki/Muphry%27s_law https://en.wikipedia.org/wiki/Muphry%27s_law
• lizardactivist 4y ago
  "I had heard good things about them on here" No, you did not hear good things about the biggest man-in-the-middle of the internet on here, and you're about to learn the tough lesson others have: don't trust Cloudflare with sensitive accounts or data.
  • dewey 4y ago
    Who are you trusting with your sensitive accounts and data?
    • sph 4y ago
      Maybe someone that doesn't hold your domain hostage because of a false positive, with no recourse. Not all companies are that bad.
    • lizardactivist 4y ago
      If they're owned, based, and operated from within the EU, and do not have a dire record to their name, then I am very likely to trust them with sensitive things.
• anderspitman 4y ago
  Hope you get it figured out. This is an example of why it's a good idea to keep your domain registrar separate from as much else as possible. The more services you use from a company, the more surface area there is for your account to get inadvertently flagged, and the bigger impact a suspension will have.
  • malikNF 4y ago
    That's a good point. Will apply this going forward.
• naet 4y ago
  There is an explanation of what is going on; it might be incomplete, but your account has in some way been flagged for fraud or spam. Maybe someone else is abusing your account, or maybe you have a miss configuration causing this to trigger, but I'd reach out to a service rep. -- I've experienced a near opposite situation: there was a news story about cloudflare providing ddos protection for a number of websites including the site for "The Proud Boys" (if you haven't heard of them, they're an all male far right american political group fairly well known for their physical fights with various other groups). My client, who was often vocal about politics on their public CEO twitter account, made a statement that if Cloudflare did not end their contract with the proud boys and a couple other unsavory groups then he would find an alternative and move all his current and future projects away from them. So it quickly fell to me to move all his legacy properties off Cloudflare and close out their old account... and while they may have lost him as a future customer, after the pain of trying to find similar levels of service for a similar price I am now recommending Cloudflare to most of my clients over their competitors for ease of use and pricing.
  • viraptor 4y ago
    Sometimes it's worth paying extra to not fund hate. They can offer low prices due to scale, so help someone else reach that scale too. I know I'm paying more but at least I'm not indirectly funding pushing people to suicide.
    • georgia_peach 4y ago
      Growing up in the south, I have yet to see a better advertisement against white supremacy than a klan rally. After image googling "mcinnes own the libs," proud boys makes the klan look PR-savvy. Cloudflare made the right call.
  • maccolgan 4y ago
    Banning sites based on politics is just as bad, don't be fooled.
• malikNF 4y ago
  Update: Just received an email from CF. -------------- Hello, With regard to your inquiry, we have restored the domain names in your account to active status. Please allow for normal propagation. You will need to re-add mnf90.com to your account in order to manage it. Our apologies for any inconvenience this may have caused. Kind Regards, Cloudflare Trust & Safety ------------ Not much info lol, but guess its fixed now? Thanks HN for up-voting my post and helping me get the attention of CF. Time to go figure-out how not to get in to this situation again, and a way to mitigate this incase the AI gets angry again. Funniest thing about this is, I wanted my own email because I was afraid of this scenario, getting locked out of everything, what happens if big G or M decide to close my account down? Again, thanks HN. Really appreciate you folks for helping me get the attention.
  • malikNF 4y ago
    Update 2: ----------------------------- Helo, To clarify the issue, this account was identified in a recent fraud review, however it appears to have been a false positive. We have left a note in this account for future reference. Kind Regards, Cloudflare Trust & Safety
    • Veen 4y ago
      That's really quite worrying. You'd have been screwed without HN, but not everyone has that recourse. How many other domains have been affected by "false positives" announced with a "we've banned you and we aren't telling you why; now fuck off" type email.
      • akersten 4y ago
        Not to mention the "don't worry, we've put a sticky note on this account so it won't happen again (to you)" instead of an "oh shit, we need to immediately stop and fix this automated process that is catching legitimate customers and banning them with no recourse."
      • malikNF 4y ago
        I agree 100%. And yes, without HN I will be really screwed.
• null_object 4y ago
  I can’t believe how lightheartedly you are taking this. (edit: I guess your initial reaction when the domain was reinstated was probably a bit of euphoria). This faceless corporation simply took away your property without explanation or warning, and didn’t even feel any obligation to explain why. For many people the consequences might have been losing their own or even their family’s source of income. Their behavior was despicable and callous. When did these tech companies start thinking they were all-powerful and above the law like this?
  • malikNF 4y ago
    > I can’t believe how lightheartedly you are taking this. What is the alternative though? The web has turned in to this massive mess where most of us don't have the ability to do anything without having to rely on some ban happy mega corp. Even something that was built to be decentralized like email has turned in to a (sort of) centralized architecture, try hosting your own email, everything goes in to spam. Host a website and piss off some kid with $5 to spare, you get ddosed. The web is owned by the big corps, as long as everyone of us come together and fix this it will be a very long time (if ever) before we have a truly decentralized internet. So yeh, the only option I have is to take this lightheartedly and move on.
    • blenderdt 4y ago
      I have a cheap VPS, host my own email, host my own websites, never had any of the problems you are describing.
      • haswell 4y ago
        I’m trying to understand the point of this anecdote. Plenty of people who use Cloudflare could post the same comment. And there are plenty of self hosting horror stories involving smaller solutions. On the topic of hosting email specifically, I thought it was pretty universally accepted as a tricky prospect. It’s possible to get right, yes, but tricky nonetheless.
      • malikNF 4y ago
• sph 4y ago
  > The suspension is permanent and we will not be making changes on our end. Someone else in this thread explained this as "they're flat up holding it hostage until it's publicly available for anyone to register." I will not do business with companies whose word is final, with no explanation and no recourse whatsoever, unless you shout loud enough that someone higher up the org tree decides to figure out what has happened. Especially when the decision actually comes from a fallible, subpar automated system. Fuck that dystopia. Shameful behaviour, Cloudflare.
  • hda2 4y ago
    Same here. Domains are the only thing I can't replicate or make redundant. If there is ANY risk of me getting locked out of my domains without even the possibility of transferring the domain away to another registrar, then I'm gone. Bye, cloudflare.
• wanderingmind 4y ago
  Once you transfer your domain out, make sure to take them to arbitration since you must have paid for their services. The more people take these orgs to arbitration, the more fearful they will become of making such blanket blan. There was a recent post on HN about arbitration [1] [1] https://news.ycombinator.com/item?id=31567673 https://news.ycombinator.com/item?id=31567673
• thaumaturgy 4y ago
  FWIW I also had a recent experience with Cloudflare "Trust & Safety" and it was my first negative Cloudflare experience, unfortunately. A client-of-a-client had their site reported to CF for malware distribution via Netcraft. I reviewed the site and found nothing unsual-looking. I dug out a month's worth of access logs for the site, carefully filtered them, and then eyeballed all of the tens of thousands of remaining lines, and again, nothing unusual. No sign whatsoever that the site had ever distributed any malware. There were signs that the site had been probed a number of times by one or a few bad actors, a bit more than just the usual background scanning. Best guess was that, having failed to take the site down through direct means, somebody filed some fraudulent reports against it. DigitalOcean also received a report on the site, and that's where the difference in handling the issue really became apparent. I sent essentially the same response to both DO and CF. DO sent back a quick, "thanks for taking a look at it, we're not going to take any action at this time, have a nice day" response. Cloudflare on the other hand pre-emptively took the site down and then took a while to reply at all. When they did, the reply was extremely opaque: "this report has been processed". Like, okay... and? I had by that time already routed the site off of Cloudflare and had it back online, so the impact was minimal, but now that I know what it's like to deal with this category of issue at Cloudflare, I have to ensure that it's always easy to take anything off of Cloudflare. I love Cloudflare generally, so this is really disappointing.
  • malikNF 4y ago
    >I have to ensure that it's always easy to take anything off of Cloudflare. I love Cloudflare generally, so this is really disappointing. This line pretty much echos my attitude to cf going forward. Come to think of it, not just CF guess its going to apply to every company I deal with going forward. Although it sounds good in theory, wonder how hard it is going to be to apply this on every situation I rely on a 3rd party company.
    • thaumaturgy 4y ago
      Yeah. CF and kin provide a lot of advantages for cheap, but they are also big consolidations of infrastructure. There are more companies than ever before that can carelessly ruin your day, and they all have more customers than they can handle, and none of them want to staff a support team. You can burn a lot of productivity trying to make everything completely fail-safe. Building stuff out of today's technology requires deciding which companies you're willing to gamble on and accepting that eventually the odds will catch you.
• Sephr 4y ago
  If I had to guess, the OP's payment method is specifically what got flagged, resulting in the domain being blocked. See https://community.cloudflare.com/t/domain-not-working-after-domain-transfer-to-cloudflare/387695/3 https://community.cloudflare.com/t/domain-not-working-after-... where someone who appears to the be OP mentioned that CloudFlare auto-refunded some charges. CloudFlare should still post a public postmortem as to how this user got wrongly flagged (excluding any personal info). The OP has already consented to this: https://news.ycombinator.com/item?id=31574656 https://news.ycombinator.com/item?id=31574656
  • malikNF 4y ago
    Yep, that's me. It's linked to my personal credit card from RBC bank Canada which I pretty much use for everything else. Haven't seen anything from my banks as well. I just see the refund in my account. Lets hope cf would tell us what exactly happened and why they were so aggressive and why there was no warning to let their customers prepare before they decided to do this.
• spinaltap 4y ago
  I'm surprised nobody asked what business the domain was doing, and what could have triggered the flag. The OP didn't say even one sentence about something like "I didn't do anything fraud related" or "I have no clue why it could possibly be flagged". But from my understanding of the world, if that's what OP thought, he probably would have said it. I also find that nothing is being served from the domain mnf90.com after it's reinstated, not sure if this has been the case in the last few months.
  • malikNF 4y ago
    I used it for my personal email. >I also find that nothing is being served from the domain mnf90.com after it's reinstated, not sure if this has been the case in the last few months. https://web.archive.org/web/*/mnf90.com https://web.archive.org/web/*/mnf90.com lol there was nothing else running here. Now that you mention it, maybe I should start blogging here.
• TimLeland 4y ago
  I've been running https://T.LY/ https://T.LY/ and many other sites with Cloudflare. I've never had an issue but if the detect malicious content, they will alert you of the issue. Is it possible you missed the email or it went to spam?
• groffee 4y ago
  At this point we should just rename HN 'cloudflare support'.
  • addandsubtract 4y ago
    HN is also the Stripe and Google hotline.
• eins1234 4y ago
  Wow, that's terrible. Thank you for the heads up. Just transferred my domains back to namecheap. While we're all here venting about Cloudflare, is anyone else frustrated about how they lure you in to their CDN product with "free" bandwidth, but then lock behind so many useful features arbitrarily behind what I can only imagine is a thousands of dollars per month enterprise plan? Just look at their cache-purging page for an example of this, everything other than basic purge by URL is enterprise only: https://developers.cloudflare.com/cache/how-to/purge-cache/ https://developers.cloudflare.com/cache/how-to/purge-cache/ These days Cloudflare is literally my last choice for a CDN for my new projects, and I try to warn against others considering using it. My new go-to is bunny.net, who charges a reasonable usage-based fee for bandwidth and gives you unfettered access to all the features they've built. Though I'd even reach for Cloudfront with their expensive bandwidth costs these days, because at least their pricing is transparent and scales smoothly with usage, and they don't arbitrarily cut you off from useful features. Even their bandwidth might not really be "free", since I've heard if you actually use any significant amount, the sales people will come knocking on your door to coerce you to get on the same enterprise plan or have your site taken down.
  • slig 4y ago
    Have you seen this thread? https://news.ycombinator.com/item?id=30506581 https://news.ycombinator.com/item?id=30506581
    • eins1234 4y ago
      Nope, thanks for bringing it to my attention. Though not sure who to trust at this point haha... Anyone have other recommendations for where I should keep my domains?
      • fotta 4y ago
        I picked Porkbun from other threads on this topic. You can search "registrar" on hn.algolia to see yourself, but tbh I never really found a single _consensus_ opinion.
      • 4y ago
• yumraj 4y ago
  Oh for F's sake.. I had moved my domains from Google to CF sometime ago, assuming my emails etc. are protected, and now this. Honest question: What is a good registrar? I used to use Namecheap in the past and have nothing against them. Unfortunately, unlike other things I cannot self-host a registrar. Thoughts? Suggestions? Edit: TBH, I find this wording rather rude "The suspension is permanent and we will not be making changes on our end." especially for a paid product.
  • malikNF 4y ago
    I should clarify, my account is a free cf account. Only thing I paid for was to extend my domain registration.
    • yumraj 4y ago
      I too have a free CF account, but I pay them to register my domains. Hence I used "paid product". I don't use other CF features and am using them just for registration purposes.
  • addandsubtract 4y ago
    I've been using namecheap for years now without any problems. Others I use or have used and would recommend are Gandi and Porkbun.
  • teddyh 4y ago
    > What is a good registrar? Find a small registrar which still is technically competent to know what they’re doing. Bigger is most assuredly not better when what you want is to actually talk to somebody when things have gone pear-shaped. If possible, find somebody as local as possible. Disclosure: I work at a small registrar, but you’re not in our target market.
  • anfogoat 4y ago
    > Unfortunately, unlike other things I cannot self-host a registrar Use .fi domains and you absolutely can. You really don't even need to code, run or host anything either unless you wanted to. Probably goes for some other lesser known ccTLDs too I'd assume.
• ab-dm 4y ago
  Ever since CF went public, their support quality has fallen off of a cliff. It's really sad to see as they have a great service, and especially recently have built some amazing stuff. I just don't understand why humans helping humans has become so much of a thing to avoid. Yes it's tricky, and it doesn't scale well, but that's the price you pay when working with people. Glad that there was a good outcome, but very sad to see it took getting on Page #1 of HN to be resolved.
• tyingq 4y ago
  The biggest deal to me is here is no escape hatch. If Cloudflare decides they don't like me, fine. But give me a button-press way to transfer my domain out, immediately, then. No asking, no waiting. You ban me, you crack open that functionality at the exact same time and link to it in your "we don't like you anymore" email.
• Animats 4y ago
  What services have contractual terms that prohibit them from taking arbitrary actions against their customers without prior notice? A list would be useful. For B2B use, you probably want to use only such services.
  • tete 4y ago
    Even for B2C I'd assume.
• bravetraveler 4y ago
  Not here, but I'd by lying if I said I didn't worry about it. I've had a small collection of domains with them for eons - probably nearing a decade or longer
  • anaganisk 4y ago
    How? Cloudflare registrar is not decade old.
• social_quotient 4y ago
  Seems like removing a site and accusing it[owner] as fraudulent would be some sort of slander/defamation and require a lot more proof and/or liability should they be wrong. The ai world should have some penalty for being wrong to discourage this sort of behavior in a punitive way. This would dissuade companies from scaling before things are really ready. Thoughts?
• Folcon 4y ago
  This reminds me of the negative experience I had with Cloudflare in the past, the thing that really bothered me about it was that though their system had made actions on my account their own audit log attributed those actions to me. So I'm still left wondering, was that intentional or a bug?
• wb14123 4y ago
  Actually something similar happened to me with Namecheap a few days ago. They banned one of my domains without any detailed explanation and refused to recover it. I end up registered the domain again at Cloudflare. Now I see this post, I don't know which company to trust anymore ... Here is their response when I asked them details: --- Thank you for your email. We regret any inconveniences you may have experienced. Please be informed that Namecheap is doing its best in order to reduce any possible misuse of our services. It was noticed that the domain in question was marked as potentially abusive in our system, and we were forced to cancel it based on the result of an internal investigation. Please accept our apologies for the inconvenience caused by this action. There are two options following which we can resolve the matter: - Refund the domain to your payment source. - Re-register it for you for free. Please consider your choice and get back to us with a result. ---
  • ipaddr 4y ago
    They cancelled and offered to re-register for free? With them?
    • wb14123 4y ago
      Yes. I actually chose that option at first, since I wanted to recover the domain quickly. But they didn't reply. So I just registered with Cloudflare and got the refund.
• jesterson 4y ago
  > I had transferred the domain from Namescheap to cloudflare because I had heard good things about them on here Mistake number one - to follow the herd :) Mistake number 2 woudl be to use Cloudflare for anything - but that's another topic
• rockooooo 4y ago
  One of the worst support experiences I ever had was with Cloudflare. They refused to tell me what I did wrong and demanded sensitive PII over email from as shady address. I moved everything I owned off Cloudflare. For paying customers it might be fine but "free, except it might get randomly nuked" is an awful deal. https://socialism.tools/why-i-ditched-cloudflare-and-you-should-too/ https://socialism.tools/why-i-ditched-cloudflare-and-you-sho...
• alexklarjr 4y ago
  Cloudflare is acting really trashy recently from development perspective also They not fixing own terraform provider for months (not speaking about new api things), their shiny and slow as python zero access PWA makes horrible things with updates and they have zero response on community boards. Only way to reach them is to have paid account and be annoying and rude to support.
• irthomasthomas 4y ago
  How can a "suspension" be permanent? It is by definition temporary. I hate this timeline. If they keep inverting the meaning of words, soon nothing will make sense.
• nmuntz 4y ago
  As a Cloudflare user this is quite scary and I'm not willing to put up with a shit show like this. What's a good alternative to CF? I mostly use CF because of their 'bonus' features like WAF.
  • tete 4y ago
    The question is if you really need their WAF. After all that usually means that you are running insecure/outdated web applications or have SQL injections and while CF might filter some stuff if that's the case I wouldn't completely rely on that either.
    • nmuntz 4y ago
      I'm mostly running a few VPS servers to host websites. I'm not too concerned about security - i'm more interested in features such as protection from DDoS attacks which I've come to learn that are quite common nowadays.