Live data from Hacker News

Ask HN: What's a good open-source alternative to Cloudflare?

news.ycombinator.com

21–30 of 69 posts

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#21

Cloudflare has become somewhat of a necessary evil. At this point, due to the sheer amount of resources and level of effort required to set up an equivalent infrastructure, they’re effectively a monopoly. Personally, I hate that and I wish the alternative was feasible, but realistically, if you need Cloudflare-level protection, you’re basically stuck with them.

are they really an "Evil" though?

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#22

Cloudflare has become somewhat of a necessary evil. At this point, due to the sheer amount of resources and level of effort required to set up an equivalent infrastructure, they’re effectively a monopoly. Personally, I hate that and I wish the alternative was feasible, but realistically, if you need Cloudflare-level protection, you’re basically stuck with them.

This is just becoming a self-sustaining HN meme. Have you actually ever looked at alternatives in serious depth or is this just an echo chamber?

Any idea how many companies in the Fortune 500 use, say, Akamai Prolexic instead? Or other vendors?

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#23
Things like CDN and DoS protection: you'll need to operate massive networks and machines distributed around the globe.

Until someone creates a well-thought decentralized CF alternative from the ground up, which solves bad actor, slow and unstable node problems, with clever incentives, et cetera et cetera, we'll be stuck with centralized solutions.

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#25
post #10

The value of CloudFlare comes from its network, not the software they run. You can hack together a caching reverse proxy (intentionally oversimplified) pretty easily, but it won't be "CloudFlare".

In fact you can just use nginx. Cloudflare itself used it for a long time (although heavily modified) and nginx will give you most of the features Cloudflare had until 1-2 years ago. You'd still need the network though.

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#26
post #10

The value of CloudFlare comes from its network, not the software they run. You can hack together a caching reverse proxy (intentionally oversimplified) pretty easily, but it won't be "CloudFlare".

> The value of CloudFlare comes from its network, not the software they run.

this is, as the kids say, a *MOAT*. you could leak the entire source of cloudflare and cloudflare's value would be unaffected.

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#27

Earlier quoted context omitted.

Hate to ask if this is obvious, but what are said red flags from the past couple years IYO?

They essentially have MITM capabilities over a significant portion of the web, undermining TLS security. They have a tendency to deny access to normal users using privacy-friendly setups (Tor, without Javascript, etc), and them operating in net loss (implying that the shareholders value growth, i.e. gobbling up even more of the internet infrastructure). Some people are also concerned about their emerging ability as a…

As a website owner, pretty much all traffic I see from Tor is malicious. I also block it outright now, it decreased bad traffic by a lot. So I can understand the decision of CF here. The problem is not Cloudflare or Tor, it's the people abusing Tor.

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#28

Earlier quoted context omitted.

Hate to ask if this is obvious, but what are said red flags from the past couple years IYO?

They essentially have MITM capabilities over a significant portion of the web, undermining TLS security. They have a tendency to deny access to normal users using privacy-friendly setups (Tor, without Javascript, etc), and them operating in net loss (implying that the shareholders value growth, i.e. gobbling up even more of the internet infrastructure). Some people are also concerned about their emerging ability as a…

> they seem to have maintained a good stance on free speech so far

good by who's definition? because there are plenty of people who hate cloudflare for flip flopping on nazi sites and will also heap that hate on just regular SWEs who join cloudflare who dont really have anything to do with those decisions.

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#29
post #10

The value of CloudFlare comes from its network, not the software they run. You can hack together a caching reverse proxy (intentionally oversimplified) pretty easily, but it won't be "CloudFlare".

Even the Worker runtime is open-source now: https://github.com/cloudflare/workerd

Re: Ask HN: What's a good open-source alternative to Cloudflare?

#30
post #6

What would it even mean to be an open source Cloudflare? The entire point of Cloudflare is that they run the tricky stuff for you. As another user said here, you can use nginx and lots of other OSS to achieve the same end goals. You will work much harder for it though.

I guess I'm just wondering how I could piecemeal it together without using cloudflare. A friend had suggested checking out bunny DNS and that got me going down the rabbit hole.

It's like trying to build an "Open Source Gas Station chain".

Yes, you can hack up a storage container and a pump with "open source" bits, but that's not what makes it useful.

What makes it useful is the fact that there is a $chain Gas Station in every nook and cranny. And that's not something openness can change.

Post reply on HN