Well, I usually block it anyway, because it is not only a single point of failure, but also a single point of concentration of data, that can be used to track, spy on and profile users. As such, I do not blindly trust Cloudflare. I remain sceptical, no matter how positive their public image is. Especially I would not set my DNS to cloudflare.
Turns out half the internet has a single-point-of-failure called “Cloudflare”
161–170 of 414 posts
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#162Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#163Earlier quoted context omitted.
How do you do a fallback from cloudflare failing when they’re your dns provider too? Any redirection around would take too long to change wouldn’t it? They’d be back up and running before it was implemented. What’s the right approach?
Don't use them for DNS, just point 60 second TTL A records at them.
The DNS is part of the load balancing, they serve different IPs based on location of the DNS query.
Edit: Apparently they do support a CNAME configuration if you pay for one of their business plans. That gives you the option to quickly switch away (if your TTL is low enough) but will impact performance by having to fetch the CNAME every 60 seconds.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#164That is the problem with massive centralization even if it is market level and internally Cloudflare (or any other big fish) does decentralization/fail-over of their own. Many of these companies should have had fail-over to competitors at least for reliability. The problem with near market monopolization, oligopoly, even the singularity, the fail-case is catastrophic and may even wipe out decentralized, diffused, dis…
There is no CDN monopoly. There are several to choose from. Cloudflare is one of the new kids on the block. There is no cloud monopoly either. Customers can choose from AWS, GCP, Azure, and several others. The problem is not market concentration. There are plenty of options. The problem is customers choosing to put all their eggs in one basket.
It makes sense that cloud companies are inclined to keep customers from giving money to competitors, but they way they sell it and structure services, reserved instances, and enterprise discounts is such that you basically are putting all of your eggs in one basket.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#165Earlier quoted context omitted.
There is no CDN monopoly. There are several to choose from. Cloudflare is one of the new kids on the block. There is no cloud monopoly either. Customers can choose from AWS, GCP, Azure, and several others. The problem is not market concentration. There are plenty of options. The problem is customers choosing to put all their eggs in one basket.
True, however at AWS at least, customers are specifically told "multi-cloud doesn't allow you to fully leverage the benefits of AWS", whatever that means. It makes sense that cloud companies are inclined to keep customers from giving money to competitors, but they way they sell it and structure services, reserved instances, and enterprise discounts is such that you basically are putting all of your eggs in one basket…
Nobody got fired for buying IBM, until they did.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#166You think your TLS connection is e2e between you and the website you are visiting? Not so much... because the website has given their certs to CF. Worse, sometimes/often the connection between CF and the website is not encrypted at all.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#167Earlier quoted context omitted.
Don't use them for DNS, just point 60 second TTL A records at them.
I don't think cloudflare supports such a configuration. The DNS is part of the load balancing, they serve different IPs based on location of the DNS query. Edit: Apparently they do support a CNAME configuration if you pay for one of their business plans. That gives you the option to quickly switch away (if your TTL is low enough) but will impact performance by having to fetch the CNAME every 60 seconds.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#168Does anyone know a dashboard/list for past Akamai outages. Surprisingly, I haven't seen a lot of news about Akamai downtimes. I searched on Google and the last one I found in a news report is from 2011 when its customers like Facebook, Twitter were impacted. They were a PITA to work with when I used them in the past but if they are really that good in service availability, you can have some justification for their ov…
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#169Earlier quoted context omitted.
Sure, but all 3 cloud providers have free tiers for this stuff, don't they?
Not that would work for a CDN use case as far as I know. The cloud providers are notorious for high egress costs.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#170Earlier quoted context omitted.
There is no CDN monopoly. There are several to choose from. Cloudflare is one of the new kids on the block. There is no cloud monopoly either. Customers can choose from AWS, GCP, Azure, and several others. The problem is not market concentration. There are plenty of options. The problem is customers choosing to put all their eggs in one basket.
True, however at AWS at least, customers are specifically told "multi-cloud doesn't allow you to fully leverage the benefits of AWS", whatever that means. It makes sense that cloud companies are inclined to keep customers from giving money to competitors, but they way they sell it and structure services, reserved instances, and enterprise discounts is such that you basically are putting all of your eggs in one basket…