3 ms·

I always feel that Cloudflare makes the right decisions and wonder what the critics are worried about. Is the criticism is that they are just too darn big? Our

I always feel that Cloudflare makes the right decisions and wonder what the critics are worried about. Is the criticism is that they are just too darn big? Our there any other nuanced opinions? Secondly doesn't an entity have to have a certain amount of internet traffic to even consider a CDN. My point of view is that large commercial entities need CDNs small time people can get by with the ip provided by the ISP.

mschuster91 3y ago
The problem is, it's incredibly hard to run a non-static website these days without using something like Cloudflare, Cloudfront+WAF or Akamai in front. You will get constantly hit by morons running hack attempts, and if you have something that someone might want to disrupt (e.g. a comment section, or you run a Mastodon instance) for whatever reason, and be it just to spam fake Vixgra pills, you will get hit by these as well. Or some extorters will DDoS you, email you "give us a thousand dollars and we'll stop". The core problem is that our governments are doing nothing to keep bad actors accountable - China, Russia, North Korea, Iran, they all can run attacks as they please without any consequence. And ISPs don't do anything if you alert them about hacked routers. In my day job, I'm responsible for running a few very high profile and high traffic targets, and the amount of bullshit we have to deal with even after CloudFront+WAF in front is absurd. Gotta be three digits worth of abuse emails I sent out to ISPs all over the world, and nothing happened.
- detourdog 3y ago
  I get hit by all that garbage on my servers in the barn. I guess I'm so low volume that It's not disruptive. My plan is to stop everything that isn't a valid URL in my next incarnation. Sounds like this won't be adequate at a certain volume of traffic. Do any current rules of them exist for estimating resources vs. traffic. I never resort to the abuse emails I figure it's all fraud. I just ban IPs indiscriminately.
WeylandYutani 3y ago
A thought experiment: if Cloudflare was a Chinese company would it bother you?
- NicoJuicy 3y ago
  That's misleading. I don't use Chinese services as much as possible, so everything would bother me if I had to use them.

mschuster91 3y ago

The problem is, it's incredibly hard to run a non-static website these days without using something like Cloudflare, Cloudfront+WAF or Akamai in front. You will get constantly hit by morons running hack attempts, and if you have something that someone might want to disrupt (e.g. a comment section, or you run a Mastodon instance) for whatever reason, and be it just to spam fake Vixgra pills, you will get hit by these as well. Or some extorters will DDoS you, email you "give us a thousand dollars and we'll stop". The core problem is that our governments are doing nothing to keep bad actors accountable - China, Russia, North Korea, Iran, they all can run attacks as they please without any consequence. And ISPs don't do anything if you alert them about hacked routers. In my day job, I'm responsible for running a few very high profile and high traffic targets, and the amount of bullshit we have to deal with even after CloudFront+WAF in front is absurd. Gotta be three digits worth of abuse emails I sent out to ISPs all over the world, and nothing happened.

detourdog 3y ago
I get hit by all that garbage on my servers in the barn. I guess I'm so low volume that It's not disruptive. My plan is to stop everything that isn't a valid URL in my next incarnation. Sounds like this won't be adequate at a certain volume of traffic. Do any current rules of them exist for estimating resources vs. traffic. I never resort to the abuse emails I figure it's all fraud. I just ban IPs indiscriminately.

WeylandYutani 3y ago

A thought experiment: if Cloudflare was a Chinese company would it bother you?

NicoJuicy 3y ago
That's misleading. I don't use Chinese services as much as possible, so everything would bother me if I had to use them.