121–128 of 128 posts
Earlier quoted context omitted.
> What if he accuses them without justification? Which He's already doing that. Even if it turns out that he happens to be right, it's coincidence.
From where I sit he is entirely justified, and the only reason problem is getting fixed is precisely because he finally decided to warn others about this problem.
While this blog post has very little in the way of proof, we actually got screwed over by CF a few weeks back. Basically, one morning all requests started being slow: small responses would take 7 seconds (within a few milliseconds, if you accounted for the RTT to the edge) with 7 seconds TTFB, larger ones (not sure exactly what the threshold was, but it was hundreds of KiB, not MiB) would take 1 minute (again, almost…
Hmm, we've been experiencing vastly reduced throughput as well (something like 100 kB/s on images >100 kB in size, cache hit). We're on the free plan, though. Makes me wonder if there's actually some throttling going on behind the scenes.
Unpopular opinion - there's a lot of entitled people here and jumping to conspiracy. There is no such thing as a free lunch [0] for people to depend a commercial service on. If your business model depends on another company providing you a free service perhaps you should reconsider. This seems to be a person being cheap and jumping to conclusions, claiming broad assumptions and conjecture as fact. Yes, cloudflare's f…
Earlier quoted context omitted.
You don't, but your monitors will show the 503 happening, how often, on which endpoint operation and in which regions; that will give you a pretty good picture of whether is actually your CDN layer or something else triggering the 503
What if it's a specific browser with a specific TLS stack, or something weird?
one has to start somewhere reasonable and realistic first.
I thought about responding to some comments here but I feel like this point deserves a comment on its own: not to defend Cloudflare, but charging at least $19 / month, having 100 customers (as he said on the post) and not using a proper fully featured WAF to protect an enterprise product is... amateurish? Also, if the infrastructure is in AWS, CloudFront would cost cents if he really does have "4 requests per minute"…
What does the WAF get you that Cloudflare's free plan doesn't? I'm not doubting you, I genuinely want to know.
[1] https://www.cloudflare.com/learning/ddos/glossary/web-applic...
OP here. This article generated some attention and traffic. The claims contained in it are incorrect. After another contact with CF support, it turned out that the Bot Fight Mode behaves differently for Free and PRO plans. That's what caused the instant improvement after upgrading. Another way to resolve the issues I was experiencing would have been to disable the bot fight mode altogether or add a custom page rule d…
Earlier quoted context omitted.
It's going to be hard for me to keep you posted because it would mean discussing a customer's account and I can't do that. That's confidential.
Hopefully OP will come back and update us
TLDR; He's retracted his claims