Instead of trusting any DNS provider with your queries, I recommend running your own recursive resolver with Unbound.
Turns out half the internet has a single-point-of-failure called “Cloudflare”
121–130 of 414 posts
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#122I love all the comments about fail-over for DDOS/DNS protection. What is your budget? Well we are looking at around $0.00 for our maximum allowance. Ok so single point of failure it is I guess we are done here. Companies only say they care when there is a problem, the reality is that they dont.
It obviously takes more than $0.00 but not that much more. It’s a matter of adding a second DNS provider and making sure you replicate DNS records manually or with AFXR.
What’s really puzzling is if the same companies spend money on active/passive failover for application and database servers while overlooking DNS single point of failure.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#123Does anyone know a dashboard/list for past Akamai outages. Surprisingly, I haven't seen a lot of news about Akamai downtimes. I searched on Google and the last one I found in a news report is from 2011 when its customers like Facebook, Twitter were impacted.
They were a PITA to work with when I used them in the past but if they are really that good in service availability, you can have some justification for their overpriced service.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#124Earlier quoted context omitted.
Read our S-1, it's all in there. https://www.sec.gov/Archives/edgar/data/1477333/000119312519...
Off topic, but any regrets on getting involved in content policing? It always sat with me as wrong and a disturbing precedent that an internet backbone service such as yourselves would make it their business to shut down unsavory yet legal speech.
It will remain at the politically correct shutdowns. Look at the list of countries they are doing business with.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#125Question: is it even possible to have DDoS protection without using a provider of it which becomes a single point of failure? Or is it maybe possible to decouple this single feature from everything else that Cloudflare provides that could take out all the sites in the future from an unrelated misconfiguration? I don't see the centralization as a positive, but I'm wondering what percentage of the websites that were ta…
I think you could use Cloudflare as your primary DNS provider and benefit from their DDoS protection, but also specify backup DNS name servers with a different DNS provider in case Cloudflare fails.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#126Honest question: I've never really understood the back of the napkin math of how Cloudflare functions economically, which I feel would go a long way towards my understanding of why/how they were able to become such an integral and generally positive part of the Internet. Did they have some crazy in to get cheap bandwidth? Did they bet big on bandwidth prices falling? Did they figure something else out that nobody saw…
> Did they figure something else out that nobody saw? I may not have a full scope of the history, but my own experience with DDoS protection was quite different. Whilst providers offered anti ddos protection through GRE tunnels and dedicated machines behind DDoS appliances and a heavy null route hand, Cloudflare had a simple few-click solution that worked at the web application level making things a lot easier and, a…
Indeed. I think I understand the argument claiming Cloudflare is a SPOF. However, if you're actually dealing with DDoS attacks with any kind of regularity, you're likely to have better uptime with them than without.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#127Who at a C-level position is going to tell anybody that the potential risk of Cloudflare (or Amazon/Azure/GCP) going down should be protected against?
I would applaud them, but I wonder.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#128Earlier quoted context omitted.
Cloudflare CEO Matthew Prince spoke to CNBC upon banning Daily Stormer: “We were worried that people would say, ‘We won’t work with you anymore,’” Cloudflare CEO Matthew Prince told CNBC. “We had to have the conversation now because at some point we’ll be a public company. We had to prompt that discussion,” said Prince, who added “we want to be ready internally by July 2018,” for a possible stock offering. CNBC Link:…
[flagged]
There's always a line, and therefore, I'm ok with drawing the line at Nazis.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#129> Turns out half the internet has a Single-Point-of-Failure called “Cloudflare” The other one is called AWS.
So in the end, who cares about single point of failures?
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#130Who at a C-level position is going to tell anybody that the potential risk of Cloudflare (or Amazon/Azure/GCP) going down should be protected against? I would applaud them, but I wonder.
There’s a lot of truth to this. Cloudflare for now has achieved IBM status in that no one will be fired for choosing Cloudflare, in spite of any issues that arise.