Live data from Hacker News

Cloudflare had a partial outage

cloudflare.com

261–270 of 448 posts

Re: Cloudflare had a partial outage

#261
post #24

This should hopefully drive home the idea of why HN shouldn't be cheering on Cloudflare's slow takeover of the internet.

CLoudflare just offer great services. Its straight up fact that even their free model is extremely generous. There is no big conspiracy to 'take over the internet' but when the product is good, the product is good.

> There is no big conspiracy

CloudFlare should be run by the CIA or something - asthonishing MITM opportunities. The only clear sign the CIA is not deeply involved is that CloudFlare is far too competent.

Re: Cloudflare had a partial outage

#262

This was very educational, all of a sudden I couldn't reach 60% of all websites I normally visit everyday. I guess this is the cost of laziness under the guise of DDOS protection.

I almost thought my internet or dns has some problem until I opened HN

Re: Cloudflare had a partial outage

#263

Kind of ironic, there was a big "cloudflare is bad and a central point of failure" article on the front page just a couple days ago. Found it, https://news.ycombinator.com/item?id=31801947 edit: Not that I necessarily agree with the article even in light of there being an outage, cloudflare has been pretty good for us. Just thought it was interesting.

Also ironic so many are blindly helping create "the great firewall of the USA" because it's easy and cheap.

Re: Cloudflare had a partial outage

#264

- Encrypted DNS seems to be having issues (very slow resolution, if any) - Having issues connecting to GitHub (Could be they are using CF, or could be DNS issue - but I'm able to connect fine to Google services) - Twitter loads, but all images fail to resolve - https://www.cloudflarestatus.com/ loads very slowly, and no assets (CSS, images, etc) load EDIT from CF :: The issue has been identified and a fix is being im…

GitHub was working fine for me in NZ. So was Twitter.

Very interesting outage.

Re: Cloudflare had a partial outage

#265

It's time to start discussing a fail-open option for us CF users. Most of my sites are using CF for global performance rather than DDoS protection and security. I'd be fine with them changing DNS to point to the origin (or any other user defined IPs) in case of issues (even if it would take hours to return to normal). This is also important for countries with limited connectivity to the Internet, if the PoP in that c…

Wouldn't this expose the origin IPs to attack?

Re: Cloudflare had a partial outage

#266
post #95

Earlier quoted context omitted.

To be fair this is not relying on a single SaaS for everything but many people relying on a single SaaS. I mean if you want to use a reverse proxy/CDN, you must rely on someone .

My company uses 3 CDNs, although not cloudflare. If one (say Aakami) goes down it gets removed from the pool and life continues.

Well that makes your company more responsible than my credit union.

Re: Cloudflare had a partial outage

#268
post #265

It's time to start discussing a fail-open option for us CF users. Most of my sites are using CF for global performance rather than DDoS protection and security. I'd be fine with them changing DNS to point to the origin (or any other user defined IPs) in case of issues (even if it would take hours to return to normal). This is also important for countries with limited connectivity to the Internet, if the PoP in that c…

Wouldn't this expose the origin IPs to attack?

I'm talking about this as an option for users like me, that don't have an attack surface, but need the global performance gains of CF.

Re: Cloudflare had a partial outage

#269

Yes, not worldwide but a lot of places. Problem with our backbone. We know what. Rollbacks etc. happening. Bring it back up in chunks. Should be back up everywhere.

It's back wooo!

And I'm saying this for the last time: no one type google into google!

Re: Cloudflare had a partial outage

#270

It's time to start discussing a fail-open option for us CF users. Most of my sites are using CF for global performance rather than DDoS protection and security. I'd be fine with them changing DNS to point to the origin (or any other user defined IPs) in case of issues (even if it would take hours to return to normal). This is also important for countries with limited connectivity to the Internet, if the PoP in that c…

You’d need to have TLS certs on origin ready to go for this scenario to work. Additionally, you’d need to make sure to test it and ensure that there’s nothing wrong in this event.

On top of that, depending on your scale, can you take all the traffic on origin that Cloudflare currently offloads?

Post reply on HN