3 ms·
They have millions of “free” subscribers; said subscribers should be the test pigs for rollouts; paying (read: big) subscribers can get the breaking changes lat
by bombcar 11mo ago
They have millions of “free” subscribers; said subscribers should be the test pigs for rollouts; paying (read: big) subscribers can get the breaking changes later.
- beardedetim 11mo agoThis feels like such a valid solution and is how past $dayjobs released things: send to the free users, rollout to Paying Users once that's proven to not blow up.
- sznio 11mo agoIf your target is availability, that's correct. If your target is security, then _assuming your patch is actually valid_ you're giving better security coverage for free customers than to your paying ones. Cloudflare is both, and their tradeoffs seem to be set on maximizing security at cost of availability. And it makes sense. A fully unavailable system is perfectly secure.
- deleted 11mo ago[deleted]
- ectospheno 11mo agoFree tier doesn’t get WAF. We kept working.
- bsdpqwz 11mo agoTheir December 3rd blog about React states: "These new protections are included in both the Cloudflare Free Managed Ruleset (available to all Free customers) ..... " having some burn in time in free tier before it hits the whole network would have been good?!