Live data from Hacker News

Network Performance Issues in multiple locations

cloudflarestatus.com

21–30 of 63 posts

Re: Network Performance Issues in multiple locations

#21
post #4
post #3

Telia had problems hitting many service providers. Not a Cloudflare problem per se. Plenty of non-Cloudflare stuff affected like Reddit, AWS, Fastly, ... Check out the dip in requests to Reddit: http://www.redditstatus.com/

Did Reddit stop using Cloudflare?

Reddit moved to Fastly at some point.

Re: Network Performance Issues in multiple locations

#22

Obligatory comment that I (and others) make every single time: can we please for 's sake stop centralizing everything? We are literally throwing away all the benefits of a mostly-decentralized internet for the sake convenience.

It's not a cloudflare issue. They report an incident on a major transit provider. This impact a log of site not just cloudflare.

Re: Network Performance Issues in multiple locations

#23

Idea: let's proxy half the internet through a private, proprietary service! We can get people to give us valid SSL certificates for their sites, too, and let's fuck up Tor while we're at it. We can totally handle it, right? Oh, and we need to pay for it somehow, so let's go the venture capital approach and just pretend we won't eventually hit a growth cap and ruin our company Twitter-style when we get there. The craz…

I love a good pitchfork and torch session as much as the next rabble-rouser, but let's remember Cloudflare got popular because they _solved*_ a hard problem: how to deal with a DDOS, as a small or medium size website. Cloudflare's essentially a for-profit insurance pool for bandwidth. No individual site has enough bandwidth to handle a DDOS, nor can afford it, but pooled together, many sites can afford a service that…

>solved

"worked around" is more appropriate, and introduced huge problems with their workaround.

The correct solution is to punish ISPs that permit this behavior to continue unchecked. We need offense, not defense. Any ISP that doesn't detect and kill DDoS participants needs to be severely throttled by other ISPs. Organizations like the FCC should be tackling this and levying fines against US-based ISPs for non-compliance and lobbying for foreign policies that punish foreign ISPs.

Re: Network Performance Issues in multiple locations

#24
post #4
post #3

Telia had problems hitting many service providers. Not a Cloudflare problem per se. Plenty of non-Cloudflare stuff affected like Reddit, AWS, Fastly, ... Check out the dip in requests to Reddit: http://www.redditstatus.com/

Did Reddit stop using Cloudflare?

They switched from Cloudflare to Fastly a few months back.

Re: Network Performance Issues in multiple locations

#25

Idea: let's proxy half the internet through a private, proprietary service! We can get people to give us valid SSL certificates for their sites, too, and let's fuck up Tor while we're at it. We can totally handle it, right? Oh, and we need to pay for it somehow, so let's go the venture capital approach and just pretend we won't eventually hit a growth cap and ruin our company Twitter-style when we get there. The craz…

I love a good pitchfork and torch session as much as the next rabble-rouser, but let's remember Cloudflare got popular because they _solved*_ a hard problem: how to deal with a DDOS, as a small or medium size website. Cloudflare's essentially a for-profit insurance pool for bandwidth. No individual site has enough bandwidth to handle a DDOS, nor can afford it, but pooled together, many sites can afford a service that…

Exactly. You don't solve a DDoS problem by having less capacity than your attacker and most individual companies can never afford the amount of bandwidth that is at Cloudflare's disposal.

Centralization was absolutely the best answer to that problem and will be for a long time. Almost nobody but fortune 500 companies would be able to survive a DDoS otherwise.

Re: Network Performance Issues in multiple locations

#26

Idea: let's proxy half the internet through a private, proprietary service! We can get people to give us valid SSL certificates for their sites, too, and let's fuck up Tor while we're at it. We can totally handle it, right? Oh, and we need to pay for it somehow, so let's go the venture capital approach and just pretend we won't eventually hit a growth cap and ruin our company Twitter-style when we get there. The craz…

I love a good pitchfork and torch session as much as the next rabble-rouser, but let's remember Cloudflare got popular because they _solved*_ a hard problem: how to deal with a DDOS, as a small or medium size website. Cloudflare's essentially a for-profit insurance pool for bandwidth. No individual site has enough bandwidth to handle a DDOS, nor can afford it, but pooled together, many sites can afford a service that…

The insurance analogy would only work if they commonly had divisions of people who wrecked peoples' stuff.

Re: Network Performance Issues in multiple locations

#27

Idea: let's proxy half the internet through a private, proprietary service! We can get people to give us valid SSL certificates for their sites, too, and let's fuck up Tor while we're at it. We can totally handle it, right? Oh, and we need to pay for it somehow, so let's go the venture capital approach and just pretend we won't eventually hit a growth cap and ruin our company Twitter-style when we get there. The craz…

Cloudflare has a freemium model, so maybe you should find a better comparison than Twitter.

They both have revenue, just from different sources. The comparison isn't that bad. All VC-backed approaches (and public companies) eventually hit a growth cap, when their investors are going to expect unsustainable growth.

Re: Network Performance Issues in multiple locations

#28
More general question, as similar situation has happened multiple times where we are not sure:

1) did we break our client server

2) did our internet provider die

3) did the service die

What are recommended ways of finding out fast and reliably in these cases where the fault is.

Re: Network Performance Issues in multiple locations

#29

Idea: let's proxy half the internet through a private, proprietary service! We can get people to give us valid SSL certificates for their sites, too, and let's fuck up Tor while we're at it. We can totally handle it, right? Oh, and we need to pay for it somehow, so let's go the venture capital approach and just pretend we won't eventually hit a growth cap and ruin our company Twitter-style when we get there. The craz…

As someone who has had their company targeted by persistent DDoS / ransoms and unable to afford protection from anyone else but Cloudflare, your statement is completely ignoring the enormous value that they provide and only focusing on the negative.

Centralization comes with risks, but I think the risk is absolutely acceptable in this case until we come up with a better, decentralized approach to attacks that normal people can afford.

Post reply on HN