Earlier quoted context omitted.
Provided by the government.
I wonder if there are people out there who don't want internet infrastructure to be run by the government specifically because the government would protect freedom of speech "too much".
Turns out half the internet has a single-point-of-failure called “Cloudflare”
221–230 of 414 posts
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#222Earlier quoted context omitted.
Why would firing someone make you feel like reparative measures have been taken?
Reparations would show an actual sense of responsibility. Firing someone would be appropriate if they were negligent. Other measures might be more appropriate. Is it enough that any time there's a Cloudflare incident, all we get are lengthy blog posts and sorries from Cloudflare?
Maybe, but making mistakes is far from negligence. Besides which, if a single person can accidentally break your system, at least at Cloudflare's scale, that's an organizational failure, not a personal failure.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#223Earlier quoted context omitted.
Congratulations with growing so big. Why aren't there dozens of lookalikes by now? I mean CDNs that will let you override the origin's cache instructions and do a decent job of DDOS protection, and whose feature list otherwise looks a little like Cloudflare's.
Yes, why isn't the CDN a commodity?
There are smaller CDNs out there. You can find them readily enough.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#224I gave Cloudflare a fair shake. But after hearing their lies way too many times, I'm calling them out for being deceptive and unscrupulous.
After being told that sites pretending to host Adobe Flash updaters and pretending to be Bank of America can't be taken down by Cloudflare because of their rights to free speech, I knew their attempts to pretend to be one of us, attempts to pretend to care, were nothing but bullshit.
They claim they don't host. If hosting DNS is not hosting, then what do you call DNS hosting? You literally CANNOT use their abuse web form to report domains which use Cloudflare just for hosting DNS. They do not handle abuse sent to their abuse email address (they simply send a form response saying to spend ten minutes filling out their crappy form that has all sorts of problems).
Of course, their web proxy services are also "not hosting", even though they're protecting all sorts of scammers.
So why should we think they're not bullshitting us when they run 1.1.1.1 and tell us they're not logging? Why should we trust them more than our ISPs by running DoH through them?
They WANT us to be dependent on them, because the more control they have, the more money they can make. It's dangerous, and they've shown they have no honor.
I've genuinely tried to correspond with them on Twitter, and they excel at not answering the question asked but instead just diverting. It's scummy, unprofessional behavior and I encourage everyone to consider whether they deserve anyone's data or business.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#225Earlier quoted context omitted.
Cloudflare is a relatively cheap "lite CDN" for developers who want caching without putting in any work. This becomes a gateway drug for Cloudflare's more expensive plans once you outgrow the free plan. It quickly adds up; I worked for a company that wasn't even on an enterprise plan and was spending hundreds of dollars a month on Cloudflare just because they had a lot of domains. My reservation with Cloudflare is th…
In my experience, it's extremely rare to find a CDN that doesn't expect to do TLS termination. My understanding of TLS is that it's exceptionally difficult to cache content if you cannot see into the requests. Perhaps I have overlooked something?
Not even "exceptionally difficult", but flat-out impossible. From the perspective of an observer, TLS sessions are random data. The protocol is specifically designed to defeat attempts to replay data -- a CDN is indistinguishable from an attacker in that sense.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#226Earlier quoted context omitted.
Yes, why isn't the CDN a commodity?
CDNs are expensive to build, and often not very useful to customers until you've built out a large portion of it (actual hardware required, you can't just run it atop AWS). On top of this, much of the money is in Enterprise. So you've got to compete with Akamai, AWS, Fastly, Incapsula, Cloudflare, and several other notable ones to get any customers to speak of. There are smaller CDNs out there. You can find them read…
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#227Earlier quoted context omitted.
I suspect customers complaining on Twitter are not the ones cared about to whoever decides to use Cloudflare.
I build an app. I use CF for my app. Customers use my app. CF has an outage. Customers don't care why I'm down, they care that my app isn't working.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#228Earlier quoted context omitted.
CDNs are expensive to build, and often not very useful to customers until you've built out a large portion of it (actual hardware required, you can't just run it atop AWS). On top of this, much of the money is in Enterprise. So you've got to compete with Akamai, AWS, Fastly, Incapsula, Cloudflare, and several other notable ones to get any customers to speak of. There are smaller CDNs out there. You can find them read…
Yes, but for a customer it's trivial to swap out one CDN for another, isn't it?
Which suggests to me that CDNs are already a commodity in some ways.
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#229Earlier quoted context omitted.
Read our S-1, it's all in there. https://www.sec.gov/Archives/edgar/data/1477333/000119312519...
Congratulations with growing so big. Why aren't there dozens of lookalikes by now? I mean CDNs that will let you override the origin's cache instructions and do a decent job of DDOS protection, and whose feature list otherwise looks a little like Cloudflare's.
A second answer - there are a bunch of bottom-barrel commoditized pipe services. You likely haven't heard of them because they're so generic. They've existed before Cloudflare, and more will be created in the future https://www.citrix.com/products/citrix-intelligent-traffic-m...
Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”
#230Many of us don't even know it. My DNS for PortableApps.com is run through Digital Ocean, which uses Cloudflare for DNS.
On an unrelated note. Thank you so much for PortableApps.com! It was invaluable at university when studying in the library. To this day, I still use it for utilities that don't need to be installed on my desktop.