I strongly advise against hosting images, particularly photos, behind CloudFlare. I don't use it myself but I'm frequently noticing CloudFlare aggressively stripping color-profiles from images. Most noticeable if the photo has an AdobeRGB profile, as many do. It makes skin tones in particular look very dull. I don't know if CloudFlare honors no-transform – I suspect they do, but most sites don't send it.
CloudFlare and Google Cloud Platform
21–30 of 133 posts
Re: CloudFlare and Google Cloud Platform
#22It's becoming unusual not to see sites behind CloudFlare now, pretty neat from a routing standpoint and devastating to user privacy and security on the whole. If things continue in this direction we'll have the cloudflare, and some scraps of regular internet off the side.
That's a lot of hyperbole there. If you look at the top 500 websites very few of them are behind CloudFlare, CloudFlare's penetration seems to be SMBs mostly (since larger orgs can afford the in-house mitigations that CloudFlare offers).
Those top 500 websites have the money to sit atop of CloudFlare's enterprise plan, which I believe offers custom-branded DNS servers.
Re: CloudFlare and Google Cloud Platform
#23I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
I would love to talk to you about this. jgc @ guess the domain.
Re: CloudFlare and Google Cloud Platform
#24I strongly advise against hosting images, particularly photos, behind CloudFlare. I don't use it myself but I'm frequently noticing CloudFlare aggressively stripping color-profiles from images. Most noticeable if the photo has an AdobeRGB profile, as many do. It makes skin tones in particular look very dull. I don't know if CloudFlare honors no-transform – I suspect they do, but most sites don't send it.
I would like to understand this. If a customer asks we do do image recompression to save space, and strip metadata (this is one of our services) but would like to know what this is about.
Re: CloudFlare and Google Cloud Platform
#25I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
I wrote an article a while back digging into the details of an outage in a website I work with caused by CloudFlare, and while at some level the issue here was "CloudFlare didn't care enough to test their stack against popular browsers and then didn't have the in-house expertise to debug and correct issues that were later found", I frankly feel like this problem is pretty engrained into their business :/. If nothing else, the article might be interesting to some as it looks at how to even go about debugging complex interactions between web browser internals and overly clever JavaScript. http://www.saurik.com/id/14 "When 'Dumb Pipes' Get Too Smart"
Re: CloudFlare and Google Cloud Platform
#26I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
> no longer in use on any critical/important end points
What's your recommendation as an alternative. Cloudflare is tempting if you are tight on resources due to free SSl, CDN, etc. and it is super easy to setup. I'd love to try out alternatives though, just as a backup.
Re: CloudFlare and Google Cloud Platform
#27Earlier quoted context omitted.
CloudFlare strips HTTPS protection off on their machines and views all plain text. So, you get HTTPS protection on the public Internet in exchange for CloudFlare getting to see everything. This may or may not be what you want/need.
Given what we learned from the NSA sniffing inter-datacenter communications within Google, do we really want wide scale solutions that rely on removing the SSL layer?
SSL added and removed at CloudFlare :)
Re: CloudFlare and Google Cloud Platform
#28I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
Would you mind posting the types of problems you've had? I use CF for many critical websites I manage and haven't noticed any problems.
Re: CloudFlare and Google Cloud Platform
#29I strongly advise against hosting images, particularly photos, behind CloudFlare. I don't use it myself but I'm frequently noticing CloudFlare aggressively stripping color-profiles from images. Most noticeable if the photo has an AdobeRGB profile, as many do. It makes skin tones in particular look very dull. I don't know if CloudFlare honors no-transform – I suspect they do, but most sites don't send it.
I would like to understand this. If a customer asks we do do image recompression to save space, and strip metadata (this is one of our services) but would like to know what this is about.
My experience in web-dev is that browser support for color profiles is dodgy at best. Much like alpha in PNGs. It's usually wiser to not rely on occasionally-supported features.
PNG alpha in particular was a nightmare for me. After that I knew to look out for the pain caused by occasionally-supported features in images.
Re: CloudFlare and Google Cloud Platform
#30Earlier quoted context omitted.
pretty neat from a routing standpoint and devastating to user privacy on the whole I'm interested. Please expand on the privacy point. I thought the general move to CloudFlare was a good thing for privacy, as it provides an easy mechanism for getting sites onto HTTPS without having every site to worry about managing certificates.
CloudFlare strips HTTPS protection off on their machines and views all plain text. So, you get HTTPS protection on the public Internet in exchange for CloudFlare getting to see everything. This may or may not be what you want/need.
It's worth remembering that that's one operating mode. There are others.