3 ms·

Hundreds of servers in 23 locations worldwide, each server running multiple instances of Nginx: http://blog.cloudflare.com/a-tour-inside-cloudflares-latest-gene

Hundreds of servers in 23 locations worldwide, each server running multiple instances of Nginx: http://blog.cloudflare.com/a-tour-inside-cloudflares-latest-generation-servers http://blog.cloudflare.com/a-tour-inside-cloudflares-latest-... The key fact is that this type of scale is possible with Nginx + Lua + hundreds (not thousands) of servers. If that were to happen (and I think it's a big "if" because of the complexity of predicting what will throw it off given that the attacker doesn't know the code we are running) then we'd see the WAF latency increase and alarms would be generated immediately. That, in turn, would cause a bunch of other mechanisms to come into play.

recuter 13y ago
Oh I get that this is the key fact, I put a smiley in there because I was fishing for a more exact number that is unlikely to be given :) Thanks for your answer. Its a very neat setup. (My intuition is that its not a case of if but when, but you've probably won yourself quite a bit of time until that happens)
- cloudflare 13y ago
  "Oh I get that this is the key fact, I put a smiley in there because I was fishing for a more exact number that is unlikely to be given" The honest truth is that I actually don't know how many servers we have because it's not a number that I have to worry about. I do know that floor(log_10(#servers)) = 2.