51–60 of 69 posts
Alternatively a company offering similar service as cloudflare but located in a more privacy friendly jurisdiction would also be interesting.
Earlier quoted context omitted.
I guess I'm just wondering how I could piecemeal it together without using cloudflare. A friend had suggested checking out bunny DNS and that got me going down the rabbit hole.
It's like trying to build an "Open Source Gas Station chain". Yes, you can hack up a storage container and a pump with "open source" bits, but that's not what makes it useful. What makes it useful is the fact that there is a $chain Gas Station in every nook and cranny. And that's not something openness can change.
Openness helps kill off rent seekers. This might be the deeper concept that sits behind the original authors question.
You can achieve the same protection by knowing your endpoints and infrastructure and then banning anything with an unacceptable delta of traffic difference.(asp vs php, wordpress vulnerability bots, etc) If you have multiple servers you share the ufw firewall lists among them in real time unless you want to ban higher up the stack.
The DOS protection might be harder to emulate. But at that point something is out to specifically get you anyways.
Just wait it out or move to another domain or ip.
The value of CloudFlare comes from its network, not the software they run. You can hack together a caching reverse proxy (intentionally oversimplified) pretty easily, but it won't be "CloudFlare".
The value of CloudFlare comes from its network, not the software they run. You can hack together a caching reverse proxy (intentionally oversimplified) pretty easily, but it won't be "CloudFlare".
Ok then let's ask another question. Is there a real competitor to Cloudflare ?
The value of CloudFlare comes from its network, not the software they run. You can hack together a caching reverse proxy (intentionally oversimplified) pretty easily, but it won't be "CloudFlare".
> The value of CloudFlare comes from its network, not the software they run. this is, as the kids say, a *MOAT*. you could leak the entire source of cloudflare and cloudflare's value would be unaffected.
Earlier quoted context omitted.
As a website owner, pretty much all traffic I see from Tor is malicious. I also block it outright now, it decreased bad traffic by a lot. So I can understand the decision of CF here. The problem is not Cloudflare or Tor, it's the people abusing Tor.
It happens even when you don't use Tor. It gradually creeps up in frequency the more privacy-friendly settings you use. You get stopped on a bunch of websites nowadays forcing you to run their proprietary JavaScript just to identify and track you to ensure you are not a robot.
Well yes, this is a good thing. The vast majority of human-made websites aim at serving humans, not unverified bots.
The value of CloudFlare comes from its network, not the software they run. You can hack together a caching reverse proxy (intentionally oversimplified) pretty easily, but it won't be "CloudFlare".
Ok then let's ask another question. Is there a real competitor to Cloudflare ?
Debating exactly how many data centers one needs to be "edge" instead of "cloud" is pretty silly. Ask what latency you need between your software and the customer, and then ask what providers can supply that.
(Of course, AWS egress transfer rates may be too costly, but that's not about "edge". https://blog.cloudflare.com/aws-egregious-egress/)
What would it even mean to be an open source Cloudflare? The entire point of Cloudflare is that they run the tricky stuff for you. As another user said here, you can use nginx and lots of other OSS to achieve the same end goals. You will work much harder for it though.
# rant I thought about this for a solid 15 minutes. What really is an open source of version of Cloudflare? That leads into the question of what is really Cloudflare. An enterprise that has built something so huge that the idea it represents can not be separated from the service (as a whole) they provide. That is like saying what is the open source alternative to I don't know....Intel or Oracle. It not only covers a…
Quick, how many products/services does AWS have?