4 ms·

> It looks like git.sr.ht is hosted on OVH in France They explain it here: > However, we found that OVH’s anti-DDoS protections were likely suitable: they are

> It looks like git.sr.ht is hosted on OVH in France They explain it here: > However, we found that OVH’s anti-DDoS protections were likely suitable: they are effective, and their cost is amortized across all OVH users, and therefore of marginal cost to us. To this end the network solution we deployed involved setting up an OVH box to NAT traffic through OVH’s DDoS-resistant network and direct it to our (secret) production subnet in AMS

pelagicAustral 3y ago
That's such an odd choice for this type of infra. I've had horrendous experiences with OVH in the past and what even worse, terrible customer service. Yes, this was about 8 years ago, and not with France based metal, but still... Being that this is Drew, I wouldn't be shocked to know that this provider choice has more to do with an anti-establishment manifesto than any practicality. Then again, I might be wrong.
- DistractionRect 3y ago
  Well, it's certainly better than their last provider who they couldn't reach during a critical time, and still cannot reasonably communicate with. They can at least reach and reason with OVH, as mentioned when they got flagged as an out bound DDoS. > Being that this is Drew, I wouldn't be shocked to know that this provider choice has more to do with a anti-establishment manifesto than any practicality I feel this is a pretty unfair barb considering one of their first moves was reaching out to Cloudflare. Unfortunately, non-http traffic + the need for tls termination on their own servers (pretty sure cloudflare calls this Keyless SSL) squarely lands them as an enterprise customer w/ enterprise pricing. Drew probably had already entered into agreements with OVH when cloudflare came back around, and we don't have insight on the terms or period for which Cloudflare's second offer was good for.
- elpy1 3y ago
  > Being that this is Drew, I wouldn't be shocked to know that this provider choice has more to do with a anti-establishment manifesto than any practicality Not wanting your traffic MITM'd is anti-establishment. That's where we're at LOL.

pelagicAustral 3y ago

That's such an odd choice for this type of infra. I've had horrendous experiences with OVH in the past and what even worse, terrible customer service. Yes, this was about 8 years ago, and not with France based metal, but still... Being that this is Drew, I wouldn't be shocked to know that this provider choice has more to do with an anti-establishment manifesto than any practicality. Then again, I might be wrong.

DistractionRect 3y ago
Well, it's certainly better than their last provider who they couldn't reach during a critical time, and still cannot reasonably communicate with. They can at least reach and reason with OVH, as mentioned when they got flagged as an out bound DDoS. > Being that this is Drew, I wouldn't be shocked to know that this provider choice has more to do with a anti-establishment manifesto than any practicality I feel this is a pretty unfair barb considering one of their first moves was reaching out to Cloudflare. Unfortunately, non-http traffic + the need for tls termination on their own servers (pretty sure cloudflare calls this Keyless SSL) squarely lands them as an enterprise customer w/ enterprise pricing. Drew probably had already entered into agreements with OVH when cloudflare came back around, and we don't have insight on the terms or period for which Cloudflare's second offer was good for.
elpy1 3y ago
> Being that this is Drew, I wouldn't be shocked to know that this provider choice has more to do with a anti-establishment manifesto than any practicality Not wanting your traffic MITM'd is anti-establishment. That's where we're at LOL.