51–60 of 92 posts
Can someone explain to me why cloudflare shares IPs across customers? Why not just give one to each?
Earlier quoted context omitted.
That wouldn't do anything, since CF's CDN connects to the backends directly. As such, any CF server not within the nation in question would effectively be a circumvention tool.
These are BGP blocks, right? If Cloudflare's ISP doesn't have a route to the system in question, then it can't proxy the site anymore. Maybe Cloudflare has an Ethernet cable between the server in question and itself, but that seems unlikely to me. There is probably some ISP in the middle that will play ball, right?
Can someone explain to me why cloudflare shares IPs across customers? Why not just give one to each?
That would be incredibly wasteful. It can use many IPs per host when using geographically local endpoints, and relatively few customers are large enough to need IPs to themselves.
Plenty of corporate web filtering solutions block on IPs, and the adoption of ESNI will only make it worse. If you manage an important website, moving out of a bad neighborhood (Cloudflare) before you end up the victim of blocking is probably a good idea.
Layer 7 gear has been around for a long time. At an ISP level I’d be shocked if they weren’t running big F5s or something similar that can handle this properly. Actually do so is another matter entirely though, and I’m not even considering throughput.
Can someone explain to me why cloudflare shares IPs across customers? Why not just give one to each?
Earlier quoted context omitted.
That would be incredibly wasteful. It can use many IPs per host when using geographically local endpoints, and relatively few customers are large enough to need IPs to themselves.
This is an IPv4 hack thing again, isn't it.
> According to reviews conducted by local telecoms regulator TKK, the IP address blocking violated net neutrality regulations and will no longer be allowed. Thank god for net neutrality. We of course have that here in America right? Cus freedom!
And despite not having net neutrality in the US not a single one of the fears came true. Which is what I said way back then: There's nothing wrong with net neutrality but it's simply not necessary.
protections are important even if someone's not actively and noticeably abusing people right this minute.
Plenty of corporate web filtering solutions block on IPs, and the adoption of ESNI will only make it worse. If you manage an important website, moving out of a bad neighborhood (Cloudflare) before you end up the victim of blocking is probably a good idea.
The association of IPs to individuals and particular services is the original sin of the Internet. At Cloudflare, we’re working to fix that sin. That doesn’t mean governments don’t have the right to regulate content on networks in their boarders: they absolutely do so long as they follow principles of Rule of Law. But blocking on an IP can never be transparent — and therefore violates the Rule of Law — and will alway…