Live data from Hacker News

Cloudflare had a partial outage

cloudflare.com

441–448 of 448 posts

Re: Cloudflare had a partial outage

#441

Earlier quoted context omitted.

Sure but that's a total outage for a long time. What if for some reason a single /24 was unreachable from the site (say an errant route for 12.85.25.0/24 somehow got in the path). How would you even know that was a problem - how many customers are on that /24, how would I measure their failed attempts to connect? I have a remote office in India on Tata. The other day it had access to much of the internet, but due to…

I'd argue you're starting from a few orders of magnitude more competency than the credit union was. Their non-banking site was hosted by some podunk company in Texas with no sense of redundancy anywhere. Their provider had a near total networking outage and the credit union had no plan to recover from that. Insofar as proactively monitoring a single /24, you (probably) don't. I don't think it's (usually) a company's…

But it isn't an outage. My monitoring point in Singapore could reach both ends, they just couldn't talk to each over, due to a routing issue on a third party network over the internet.

On my own network which I control I accept that if a circuit breaks I'll have a 1, maybe 2 second outage while traffic reroutes. For some of my services that's would be a problem, for others it's not. If facebook loads 2 seconds later, nobody cares. If the winning penalty in the world cup final blacks out, that's a big problem.

Re: Cloudflare had a partial outage

#442

Earlier quoted context omitted.

Cloudflare going down is one of the things which keeps me awake, My main complaint about Cloudflare is that they are very good at everything they offer that we've become reliant on them for everything.

Happens to everybody sometime. AWS seemed to have a major outage a couple of times a year for a while there.

Exactly but the likelihood of two networks going down at the same time is close to Zero. Check out: https://www.cdnreserve.com/ We rolled it out to complement top CDNs.

Re: Cloudflare had a partial outage

#443

Earlier quoted context omitted.

"do no evil" springs to mind -- once burned, etc.

Yeah, What's up with the competition to Cloudflare? What's the real barrier for entry? It's not infrastructure anymore, As there is a new PaaS startup every week offering distributed hosting and So why bundling in DNS, DDOS detection+mitigation, cloud workers... with it is so hard?

There are many noteworthy players - Akamai, Fastly etc., and Edge plaoviders like ourselves (Zycada) who complement top CDNs like Akamai, Cloudflare, Fastly.

Re: Cloudflare had a partial outage

#444

Yes, not worldwide but a lot of places. Problem with our backbone. We know what. Rollbacks etc. happening. Bring it back up in chunks. Should be back up everywhere.

CF SRE team need to rethink their published SLA of 100%. This is not reasonable. https://www.cloudflare.com/business-sla/

[deleted]

Re: Cloudflare had a partial outage

#445

Yes, not worldwide but a lot of places. Problem with our backbone. We know what. Rollbacks etc. happening. Bring it back up in chunks. Should be back up everywhere.

CF SRE team need to rethink their published SLA of 100%. This is not reasonable. https://www.cloudflare.com/business-sla/

I completely can understand your emotion. But even the top CDNs can have outages of some form or the other. If site uptime is important, check out https://www.cdnreserve.com/ - it's built on the design principle that the likelihood of two separate platforms having an outage at the same time is close to zero.

Re: Cloudflare had a partial outage

#446
post #433

Earlier quoted context omitted.

I absolutely agree and very respectfully so. No one is immune to outages. Well said. CDNReserve is designed in a way, that if the outage occurs on one platform it will map the traffic to failover CDN and if the failover/backup CDN suffers an outage, the traffic will be shifted to the primary CDN using CDNReserve. Its built on the premise that the likelihood of two CDNs having outage at the same time is close to ZERO.

The likelihood of CDNReserve having an outage on the other hand is 100%. You aren't the first to come up with the idea of a CDN traffic director (I built one), and you'll soon discover customers recognize you are just another single point of failure and not the solution. Best to focus on the things other companies in the space market on, bill optimization, latency optimization, etc.

Agreed. The likelihood of any platform having an outage is 100%. But the likelihood of two networks having the outage at the same time is close to zero. It's awesome that you built a similar solution in the past. It would be great to jump on a call and learn from your experience if you are open to it.

Re: Cloudflare had a partial outage

#447

Earlier quoted context omitted.

Yeah, What's up with the competition to Cloudflare? What's the real barrier for entry? It's not infrastructure anymore, As there is a new PaaS startup every week offering distributed hosting and So why bundling in DNS, DDOS detection+mitigation, cloud workers... with it is so hard?

There are many noteworthy players - Akamai, Fastly etc., and Edge plaoviders like ourselves (Zycada) who complement top CDNs like Akamai, Cloudflare, Fastly.

The main difference between Cloudflare and the others mentioned is the price; One can start with CF for a side project for free and continue to use it free till it becomes a viable startup.

Others at best offer a limited trial plan, But most are just 'Speak to expert/ Contact us' for pricing which means haggling with a sales rep while we can just build things. Even the paid plans of CF is reasonable when compared with others with better features.

Re: Cloudflare had a partial outage

#448

Earlier quoted context omitted.

You need to block 443 for any other IP than Cloudflare. The IP list can be found at https://www.cloudflare.com/ips/ .

and/or use Authenticated Origin Pulls with a TLS client certificate.

That would leak your IP nevertheless. People can figure out that you're serving a specific website by inspecting your certificate on handshake without actually connecting.
Post reply on HN