Live data from Hacker News

Cloudflare Network Performance Issues

cloudflarestatus.com

301–310 of 329 posts

Re: Cloudflare Network Performance Issues

#301
post #97

Earlier quoted context omitted.

By the time that change propagates, cloudflare will be backup

Yes, but then next time you will be able to control your DNS.

Though, only if you're using a short TTL. I'm not arguing against your position in general though.

Re: Cloudflare Network Performance Issues

#302
post #300

Earlier quoted context omitted.

One thing is not every free or pro plan on cloudflare is personal use. I'm running the web servers, official wiki, and game external resource portal for the most active open source video game on github, through cloudflare, and maybe we might not want our 60 million requests a month website to go down when cloudflare does. Because I can tell you right now our 300 a month budget (that mind you, is capable of covering 7…

If you don’t count this as a personal or hobby project it’s a community project. They don’t have a pricing plan for that so you either have to go pro or go to some other provider who gives you this much for free. Why should a company give you even more pro features for free if you are already getting a lot of things for free?

Pro($20) does not give you the cname feature, business ($100) does.

Re: Cloudflare Network Performance Issues

#303
post #92
post #9

Single point of failure - we all shouldn’t trust CF alone anymore...

Any CDN is a single point of failure and limits your availability to as low as three nines. Although anycast-based CDNs like Cloudflare are much less reliable than DNS-based CDNs, those can do orders of magnitude better.

Why do you think anycast based CDNs are worse than DNS based ones?

Re: Cloudflare Network Performance Issues

#304

Earlier quoted context omitted.

This is important to recognize. Victim blaming is a highly destructive practice.

Assigning blame for technical business decisions to the people who made those decisions is victim blaming?

Targeting the process or behavior that lead to an event is far more effective than targeting the person that triggered it. Do not conflate the two.

Re: Cloudflare Network Performance Issues

#305
post #252

Once cloudflare.com came back I decided to check out their business SLA, and it's not very encouraging: > For any and each Outage Period during a monthly billing period the Company will provide as a Service Credit an amount calculated as follows: Service Credit = (Outage Period minutes * Affected Customer Ratio) ÷ Scheduled Availability minutes - https://www.cloudflare.com/business-sla/ So assuming an outage affects…

This doesn't surprise me at all - SLA's are widely overrated. No SLA will cover damages incurred by lost business due to an outage. What you likely want is some kind of third-party insurance for downtime caused by outages out of your control - but I'm not even sure this exists.

This type of insurance does exist. Speak to your broker.

Re: Cloudflare Network Performance Issues

#306
post #252

Once cloudflare.com came back I decided to check out their business SLA, and it's not very encouraging: > For any and each Outage Period during a monthly billing period the Company will provide as a Service Credit an amount calculated as follows: Service Credit = (Outage Period minutes * Affected Customer Ratio) ÷ Scheduled Availability minutes - https://www.cloudflare.com/business-sla/ So assuming an outage affects…

This doesn't surprise me at all - SLA's are widely overrated. No SLA will cover damages incurred by lost business due to an outage. What you likely want is some kind of third-party insurance for downtime caused by outages out of your control - but I'm not even sure this exists.

Also the standard SLA you get will be wildly different from the bespoke contacts negotiated by enterprises. Just depends on your spend.

Re: Cloudflare Network Performance Issues

#307

Earlier quoted context omitted.

If you use Cloudflare nameservers, you have to change to new nameservers, wait for that to propogate, and then wait for clients cached records TTLs to expire. So it will be a major disruption no matter what you do.

If you're using them for TLS certs then it's an even bigger problem unless you have them provisioned elsewhere.

Unless you need EV you can just pull some wildcards from Lets Encrpt (as long as you don't use pubkey pinning). No need to automate as it's just a one off.

Re: Cloudflare Network Performance Issues

#308

Earlier quoted context omitted.

Sadly this reminds me of AWS outages too where the same applies. How is it that hundreds of developers know there's an issue before AWS do, or Cloudflare in this instance. See my blog post on similar AWS uptime reporting issues at https://www.ably.io/blog/honest-status-reporting-aws-service . At Ably, our status site had an incident update about Cloudflare issues being worked on (by routing away from CF) before Cloud…

Heh, I am reminded of when the control plane at AWS went down... and we had a custom autoscaling config that would query for the number of instances running and scale appropriately... but when the AWS API died... we kept getting zero running instances... So our system thought none were running and so it kept launching instances.... These were SPOT instances and thus only cost like .10 per hour... But we launched like…

> but he created the 201th repo (we had only paid for 200)

That's an odd choice of a failure mode.

> AWS still refunded all costs...

Yeah they should. It was their silly design choice that lead to disclosure of secrets after all.

What kind of failure mode is that even. Failing to create the repo would have led to a better user experience for sure.

Can you imagine if S3 charged more for private objects and once you reach your count, it just makes them public and posts them on Reddit?

Re: Cloudflare Network Performance Issues

#310
post #142
post #72

Good. I'm tired of people not learning that trusting a single gateway with 50% of the internet is bad. Yes, I know, free DDOS protection. There has to be another way of doing this, some mesh based DDOS protection or so.

This seems like a case for putting more of the internet through a single gateway. Having my downtime correlated with everyone else's means users will be more forgiving because they'll perceive it as "the Internet's down" rather than "lkbm's site is broken". (We saw this with CloudFlare. Some users were pissed, and others jumped in with "it's not their fault; AWS is down". That doesn't happen when our stuff specifical…

It's a horribly short-sighted, irresponsible and dangerous attitude. When your service goes down on its own its users can switch to some backup process temporarily. If half the internet goes down, they are screwed. How much they're screwed depends on how they're using your services at the moment, which you most likely can't even know.
Post reply on HN