4 ms·

Cloudflare are winning these days, they’re just lacking good fine grained permissions. You still have to make an entirely separate account for prod, which messe

Cloudflare are winning these days, they’re just lacking good fine grained permissions. You still have to make an entirely separate account for prod, which messes up SSO since one domain can only be bound to one account.

teaearlgraycold 4mo ago
Just let everyone have access to prod?
- corvad 4mo ago
  One account gets compromised and your doomed. A lot of companies even have prod access be a request based system. Most modern security models with zero trust don't let everyone have access to everything, quite the opposite.
- toomuchtodo 4mo ago
  Poor access and change management governance.
- greenchair 4mo ago
  hooboy that was a good one!
atsaloli 4mo ago
Yes! I just opened a support case today asking for more fine grained permissions.
pupppet 4mo ago
After years of AWS I gave Cloudflare a whirl and loved the UX but ultimately retreated back due to the same concern. They are so close though..
corvad 4mo ago
Their products are cool and I've been happy with them over the years, but their blog right now has had some blunders recently. Also their reliability seems to have been having trouble but does seem better recently.
wilj 4mo ago
This is exactly what stops me from using them for real work. I love their free tier for my hobby stuff.
wahnfrieden 4mo ago
Will never use them without prepayment or spending limit options. Insane to be a bug, attack, or misclick away from 6-7 digit invoice
- weird-eye-issue 4mo ago
  Their pricing is not ridiculous like some providers. It would be very hard to rack up that kind of bill, especially considering their rate limiting rules are now free to use.
- behindsight 4mo ago
  the CTO of Cloudflare (hn: dknecht) said: > It is in the works. The billing team has been sprinting to fix a lot of debt in this area. I don’t have a date. https://x.com/dok2001/status/2051220429973389622 https://x.com/dok2001/status/2051220429973389622
  - wahnfrieden 4mo ago
    Great thanks
willsmith72 4mo ago
Yep I made the switch a couple of years ago for all of my projects and never looked back. Workers, D1, R2, queues, containers, KV Still using AWS for email sending so that will be great when it comes
- corvad 4mo ago
  It already came if you use workers I believe, still in beta though. I would love to switch to it but I still need the SMTP interface though. https://developers.cloudflare.com/email-service/ https://developers.cloudflare.com/email-service/
  - willsmith72 4mo ago
    wow thanks. I saw the initial announcement when it was still in private beta, but have been less online lately and missed the public launch. Awesome!!
- h4ch1 4mo ago
  E-mail sending is in beta afaik, you need the Workers paid plan to use it.
  - willsmith72 4mo ago
    thank you!! missed the public launch
JackSlateur 4mo ago
Not sure what they are winning .. we kept them as a backup but they are so bad that they fail even there

teaearlgraycold 4mo ago

Just let everyone have access to prod?

corvad 4mo ago
One account gets compromised and your doomed. A lot of companies even have prod access be a request based system. Most modern security models with zero trust don't let everyone have access to everything, quite the opposite.
toomuchtodo 4mo ago
Poor access and change management governance.
greenchair 4mo ago
hooboy that was a good one!

atsaloli 4mo ago

Yes! I just opened a support case today asking for more fine grained permissions.

pupppet 4mo ago

After years of AWS I gave Cloudflare a whirl and loved the UX but ultimately retreated back due to the same concern. They are so close though..

corvad 4mo ago

Their products are cool and I've been happy with them over the years, but their blog right now has had some blunders recently. Also their reliability seems to have been having trouble but does seem better recently.

wilj 4mo ago

This is exactly what stops me from using them for real work. I love their free tier for my hobby stuff.

wahnfrieden 4mo ago

Will never use them without prepayment or spending limit options. Insane to be a bug, attack, or misclick away from 6-7 digit invoice

weird-eye-issue 4mo ago
Their pricing is not ridiculous like some providers. It would be very hard to rack up that kind of bill, especially considering their rate limiting rules are now free to use.
behindsight 4mo ago
the CTO of Cloudflare (hn: dknecht) said: > It is in the works. The billing team has been sprinting to fix a lot of debt in this area. I don’t have a date. https://x.com/dok2001/status/2051220429973389622 https://x.com/dok2001/status/2051220429973389622
- wahnfrieden 4mo ago
  Great thanks

willsmith72 4mo ago

Yep I made the switch a couple of years ago for all of my projects and never looked back. Workers, D1, R2, queues, containers, KV Still using AWS for email sending so that will be great when it comes

corvad 4mo ago
It already came if you use workers I believe, still in beta though. I would love to switch to it but I still need the SMTP interface though. https://developers.cloudflare.com/email-service/ https://developers.cloudflare.com/email-service/
- willsmith72 4mo ago
  wow thanks. I saw the initial announcement when it was still in private beta, but have been less online lately and missed the public launch. Awesome!!
h4ch1 4mo ago
E-mail sending is in beta afaik, you need the Workers paid plan to use it.
- willsmith72 4mo ago
  thank you!! missed the public launch

JackSlateur 4mo ago

Not sure what they are winning .. we kept them as a backup but they are so bad that they fail even there