111–120 of 121 posts
Earlier quoted context omitted.
Are you going to make a substantive claim or just throw around accusations with no foundation?
Running effectively a MITM service for SSL then blasting private keys all over the internet might be a good example.
Earlier quoted context omitted.
What tools are you using for internal analytics? Streaming logs into something like GoAccess?
Streaming structured JSON access logs from nginx into an ElasticSearch via logagent-js, and then query via kibana. But goaccess is fine if you just want quick aggregate information!
Earlier quoted context omitted.
Streaming structured JSON access logs from nginx into an ElasticSearch via logagent-js, and then query via kibana. But goaccess is fine if you just want quick aggregate information!
Thanks, may I ask how you are processing visitor locations? IP through some geo services?
It is great that they provide an analytics without tracking or ads, but then if it is free what is the business model behind it? Is it only an entry-point to attract people on other paid services?
We hope you’ll see all the things Cloudflare can do and sign up for our other services. Lead gen. Simple.
So far Cloudflare cdn in my experience is much faster than google or Amazon. Google cloud cdn really disappoints me. Cloudflare v8 isolate based edge workers are pretty phenomenal too.
1) JS-based analytics (the free one, advertised in the blog post)
2) Edge server logs based one (available on Pro+ plans only)
Am I right?
Earlier quoted context omitted.
What is despicable about an analytics product that doesn't track people?
"An analytics product that doesn't track people" is nonsensical. It's like "water that isn't wet". Importantly, real trust on the internet is built on math and logic, not on faith. And faith, in this case, in a corporate institution which has spent years expending its fullest effort to direct as much of the flow of internet traffic through its servers as possible. I am never going to take you at your word that you wo…
Earlier quoted context omitted.
Running effectively a MITM service for SSL then blasting private keys all over the internet might be a good example.
Blasting private keys? [Citation Needed]
EDIT: Wait, you're the Cloudflare CEO and you don't know about Cloudbleed?
Earlier quoted context omitted.
Assuming here we mean individual "sessions", eg. session cookies which are removed after you navigate away from the site. Will have to read their JS to see what they're doing.
Session cookies don't have to do with whether you stay on the site or not. They are tied to browser processes.
Earlier quoted context omitted.
A custom Host header passed to the origin that differs from the actual Cloudflare-hosted subdomain, without changing its DNS resolution - correct. This would be helpful when the origin is hosted by an inflexible third party, or as a time saver to quickly switch between environments without needing to modify other parts of the infrastructure. Example 1: A third-party service does not support custom domains, only respo…
Unfortunately we (Cloudflare) can't allow Host header rewrites like this as they could be used to bypass other customers' Cloudflare security settings. However, both of your examples can be done with Workers. I wrote a more detailed explanation a while back here: https://news.ycombinator.com/item?id=25058579
Earlier quoted context omitted.
The vast majority of bot traffic identifies itself though. Search engines from all over that you've never heard of, but they're all showing accurate user agents. I don't attribute every access by far, of course, but for a small website (with peaks to high HN ranks, so it's not unknown or that badly linked) it's manageable to tail -f the access log and see that the traffic you're getting matches what you expect after…
The vast majority of what I guess is "robotic, but javascript-running" traffic identifies itself as the (headless) browser it most likely uses, i.e. Chrome. When such crawlers use a distributed network of machines to crawl, there's no easy way to identify them as such, other than _guess_ that they're robotic in nature due to them coming from "data centre" like IPs (i.e. AWS, Azure, GCP, waht-have-you). While such req…
I'm sure it'll be there, lots of people will be interested in what differences a page shows from different vantage points or to robots, but it's probably less than a percent of all robot traffic.
Though checking the thread above mine, I'm not exactly sure what I was replying to. Didn't it say something about robot traffic that wasn't identifiable as such? I don't see that anymore.