Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turns out half the internet has a single-point-of-failure called “Cloudflare”

easydns.com

Post reply on HN
Print view View original

111–120 of 414 posts

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#111

Post by pas »

1996 wrote: post #75
pas wrote: post #69

Earlier quoted context omitted.

They want to be the registrar to be able to update your NS records. But ... that's not really important nor needed (So the answer to your question yes, it's likely artificial). Just use two anycast-ed IPs/domains. (Like Cloudflare.) The magic happens at BGP level. I considered CF as a domain registrar, but they don't allow setting the NS records. So you must use them. (They basically use sane no-nonsense domain regis…

> Just use two anycast-ed IPs/domains What are the brands offering DNS at a flat rate over anycasted IP over a few continents? Most of the offers I see are per query at high rates. Setting up my own ASN to do this would be too expansive in IPv4

I meant that easyDNS should handle the BGP for its clients, without requiring their clients to use them as registrars.

There's HE.net's free DNS, and though they don't explicitly advertise as, it's anycasted. (Check via https://tools.keycdn.com/ping , try 216.66.80.18 [ns5.he.net].)

https://www.cloudns.net/premium/ seems to be quite affordable with no query limits :o

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#112

Post by transpostmeta »

potency wrote: post #92
nix23 wrote: post #79

Earlier quoted context omitted.

Wikileaks and Piratebay are customers of CF, so your 'legal speech' must be really something. Any links?

Cloudflare CEO Matthew Prince spoke to CNBC upon banning Daily Stormer: “We were worried that people would say, ‘We won’t work with you anymore,’” Cloudflare CEO Matthew Prince told CNBC. “We had to have the conversation now because at some point we’ll be a public company. We had to prompt that discussion,” said Prince, who added “we want to be ready internally by July 2018,” for a possible stock offering. CNBC Link:…

[flagged]

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#113

Post by henriquez »

edaemon wrote: post #109
henriquez wrote: post #97

Earlier quoted context omitted.

You're right about that. So it might look like this static.domain.com (CDN subdomain with auto provisioned TLS) static-uncached.domain.com (private pass-through subdomain when CDN is missing a file) www.domain.com (app server hosted wherever) You're right that you could do something similar with other CDNs including Cloudflare (you can just set the www subdomain to "bypass Cloudflare" to accomplish a similar result),…

They have a CNAME setup where authoritative DNS stays outside of Cloudflare: https://support.cloudflare.com/hc/en-us/articles/36002061511... It requires at least the Business level plan, though.

Ah my bad. That’s probably why I never knew about it. The $200/month entry price is steep there.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#115

Post by LoathsLights »

drawkbox wrote: post #13

That is the problem with massive centralization even if it is market level and internally Cloudflare (or any other big fish) does decentralization/fail-over of their own. Many of these companies should have had fail-over to competitors at least for reliability. The problem with near market monopolization, oligopoly, even the singularity, the fail-case is catastrophic and may even wipe out decentralized, diffused, dis…

Calm down there mr buzzwords, this is not a job interview.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#117

Post by icedchai »

mfkp wrote: post #55
saagarjha wrote: post #34

Earlier quoted context omitted.

> Many of these companies should have had fail-over to competitors at least for reliability. How would you even set such a thing up? I fear that you might get a couple of collusionary companies that bail each other out and smaller providers might just be left out to dry…

Many DNS providers have the ability to do AXFR "zone transfers", so you can sync your records to a secondary provider and you would add a secondary set of nameservers for redundancy. Unfortunately Cloudflare doesn't offer this unless you pay for their Enterprise plan (they started offering it earlier this year). I do love using CloudFlare for DNS, lots of great features and generally works well, but I wish they would…

Amazing that this isn't "free" and folks have to resort to syncing records across DNS providers with proprietary, vendor-specific APIs. AXFR is standard. It's not just Cloudflare... AWS and Azure don't support it either.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#118

Post by citizenpaul »

I love all the comments about fail-over for DDOS/DNS protection. What is your budget? Well we are looking at around $0.00 for our maximum allowance. Ok so single point of failure it is I guess we are done here. Companies only say they care when there is a problem, the reality is that they dont.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#119

Post by crazygringo »

I guess this is off-topic, but the stock photo they're using is cracking me up.

Guy at work... coffee cup on a tablet he's using for a coaster... except he's also drinking whiskey from a beautiful crystal glass... there's a folded paper airplane... there's just so much to unpack here, it's pretty hilarious.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#120

Post by niutech »

The solution is the Decentralized Web (DWeb), such as IPFS (https://ipfs.io), Freenet (https://freenetproject.org), GNUnet (https://gnunet.org) or Hypercore (https://hypercore-protocol.org). We should start using them to avoid centralization and embrace freedom.
Post reply on HN