101–110 of 133 posts
We run Quizlet behind Cloudflare, and use Google Cloud for all our server infrastructure (>150 VMs). We've been very happy on both platforms. We'll be saving around $2k/mo on bandwidth because of this deal, and we didn't have to lift a finger. Yay :)
Happy to answer any questions about either platform.
Earlier quoted context omitted.
Besides Cloudflare being the biggest man-in-the-middle on the internet, their DDoS mitigation offering is also questionable. If you google "clouflare bypass" [1], you get to websites that can tell you the origin IP address of a cloudflare customer's domain name. So, malicious guys could hit the real IP directly. [1] https://www.google.com/search?q=cloudflare+bypass
> If you google "clouflare bypass", you get to websites that can tell you the origin IP address of a cloudflare customer's domain name. Those rely on a known DNS history from before CloudFlare was added to a domain. If bypass is a concern, changing the server's IP and making sure it never shows up in a public DNS record again solves things.
* Keep all subdomains on CloudFlare
* Don't use wildcard subdomains if you are not on Pro account
* Don't host mail or other services on the same server as your web server (email headers have origin IP)
* Never initiate an outbound connection based on user action
* Make sure that your web server and web application are patched against all known information disclosure vulnerabilities.
* Change your origin IP once configured for maximum DDoS protection on CloudFlare
Cloudflare documents it here: https://blog.cloudflare.com/ddos-prevention-protecting-the-o...
I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
Would you mind posting the types of problems you've had? I use CF for many critical websites I manage and haven't noticed any problems.
I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
I tried their enterprise tier out about 9 months ago and was entirely unimpressed. Moving a site from Akamai -> CF increased page load times dramatically. We ended up quickly switching back. CloudFlare's complicity with ISIS, however, was what turned me off permanently. For those unaware, CloudFlare was providing proxy shielding of ISIS's propaganda websites. The CF CEO publicly refused to discontinue their service,…
Might be that they were asked to continue to provide services.
Earlier quoted context omitted.
I tried their enterprise tier out about 9 months ago and was entirely unimpressed. Moving a site from Akamai -> CF increased page load times dramatically. We ended up quickly switching back. CloudFlare's complicity with ISIS, however, was what turned me off permanently. For those unaware, CloudFlare was providing proxy shielding of ISIS's propaganda websites. The CF CEO publicly refused to discontinue their service,…
Interesting. This is the first I have heard of this and CloudFlare's reputation has just gone up my eyes because of it. Is ISIS dangerous and deplorable? Sure. Are there ideas so dangerous that they do not deserve to be exposed to public discourse and judged on their merits? I don't think so.
I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
I tried their enterprise tier out about 9 months ago and was entirely unimpressed. Moving a site from Akamai -> CF increased page load times dramatically. We ended up quickly switching back. CloudFlare's complicity with ISIS, however, was what turned me off permanently. For those unaware, CloudFlare was providing proxy shielding of ISIS's propaganda websites. The CF CEO publicly refused to discontinue their service,…
If the business owner was Christian and decided to ban pro-gay marriage websites, would you be fine with this?
The problem is that when we start deciding who gets the freedom of expression/speech, it starts to erode the rights of anyone that doesn't agree with the status quo..and the people with the most money and power get to decide what speech is moral/immoral.
HN is a good example of it in action. Even comments slightly off the standard SF ideals gets down voted and silenced.
It's a scary time for our country because it's almost like we are slipping into fascism. If you have an opinion that is against the current narrative, you get silenced, your career is ruined, and your life is destroyed. Bullying is also okay in this situation. Nobody can just disagree anymore. Opponents need to be forced into submission.
See: The ex-mozilla CEO and the guy that shot cecil the lion.
I think it's great that the CEO of CloudFlare took this stance. It takes a lot of balls and I know when the time comes, my speech will also be protected.
Earlier quoted context omitted.
Would you mind posting the types of problems you've had? I use CF for many critical websites I manage and haven't noticed any problems.
I'm in financial services...as part of our checkout process, the customer downloads a 1 MB pdf with sensitive and unique data to them. In testing ( a test site with cloudflare set up), everything was fine. In production, apparently cloudflare cached these pdfs after some sort of traffic threshold was reached (I guess they are all very similar in size...though they are probably not exactly the same size.) Now customer…
Earlier quoted context omitted.
Would you mind posting the types of problems you've had? I use CF for many critical websites I manage and haven't noticed any problems.
I'm in financial services...as part of our checkout process, the customer downloads a 1 MB pdf with sensitive and unique data to them. In testing ( a test site with cloudflare set up), everything was fine. In production, apparently cloudflare cached these pdfs after some sort of traffic threshold was reached (I guess they are all very similar in size...though they are probably not exactly the same size.) Now customer…
I want to love CloudFlare, I really do. We currently use them, but sadly the number of times that CloudFlare has been the cause of a service interruption is somewhere around 50% mark. They are no longer in use on any critical/important end points, I just don't need PagerDuty waking us up over an issue I have no control over. This is not a problem I expect to improve. As they start to cover all of the web, i imagine t…
Would you mind posting the types of problems you've had? I use CF for many critical websites I manage and haven't noticed any problems.