171–180 of 414 posts
Instead of trusting any DNS provider with your queries, I recommend running your own recursive resolver with Unbound. https://nlnetlabs.nl/projects/unbound/about/
But then aren't you just trusting your VPS provider or ISP instead?
The solution is the Decentralized Web (DWeb), such as IPFS ( https://ipfs.io ), Freenet ( https://freenetproject.org ), GNUnet ( https://gnunet.org ) or Hypercore ( https://hypercore-protocol.org ). We should start using them to avoid centralization and embrace freedom.
Can you explain a bit more how this is a solution? Cloudflare isn't facebook. They have plenty of competitors, they don't have a massive moat, and they are almost exclusively used by businesses. Despite all of this, we should ask ourselves how we even got here. Why would companies move to DWeb, when they are already choosing to use Cloudflare instead of Fastly/Cloudfront/Akamai.
Earlier quoted context omitted.
Read our S-1, it's all in there. https://www.sec.gov/Archives/edgar/data/1477333/000119312519...
Off topic, but any regrets on getting involved in content policing? It always sat with me as wrong and a disturbing precedent that an internet backbone service such as yourselves would make it their business to shut down unsavory yet legal speech.
Honest question: I've never really understood the back of the napkin math of how Cloudflare functions economically, which I feel would go a long way towards my understanding of why/how they were able to become such an integral and generally positive part of the Internet. Did they have some crazy in to get cheap bandwidth? Did they bet big on bandwidth prices falling? Did they figure something else out that nobody saw…
Earlier quoted context omitted.
I don't think cloudflare supports such a configuration. The DNS is part of the load balancing, they serve different IPs based on location of the DNS query. Edit: Apparently they do support a CNAME configuration if you pay for one of their business plans. That gives you the option to quickly switch away (if your TTL is low enough) but will impact performance by having to fetch the CNAME every 60 seconds.
Does cloudflare actually do geo-loadbalancing via DNS A records now? For years they only did anycast, unlike, say, Akamai, which hands out different IPs for each POP.
But I'm pretty sure they use DNS do other loadbalancing and DDoS mitigations.
For example, if a site is under attack, they can send it to different IP addresses to keep it away from other sites. Or if someone is directly targeting a cloudlflare IP with a DDoS, they can redirect all sites to other IPs and just blackhole that IP.
Earlier quoted context omitted.
There is no CDN monopoly. There are several to choose from. Cloudflare is one of the new kids on the block. There is no cloud monopoly either. Customers can choose from AWS, GCP, Azure, and several others. The problem is not market concentration. There are plenty of options. The problem is customers choosing to put all their eggs in one basket.
True, however at AWS at least, customers are specifically told "multi-cloud doesn't allow you to fully leverage the benefits of AWS", whatever that means. It makes sense that cloud companies are inclined to keep customers from giving money to competitors, but they way they sell it and structure services, reserved instances, and enterprise discounts is such that you basically are putting all of your eggs in one basket…
One of the selling points of cloud providers is managed services like SQS. If you run a multi-cloud architecture, you either can't use managed services, or have to build abstraction layers on top of them (and only use the features that exist in both cloud providers' versions of the managed service).
If you want to use a managed service that only exists on AWS, then that's obviously incompatible with a fully multi-cloud architecture.
Earlier quoted context omitted.
You'll be shocked to hear who use the postal system and roads, then.
Provided by the government.