Live data from Hacker News

Cloudflare misidentifies Hetzner IPs as being located in Iran

gitlab.com

61–70 of 245 posts

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#62

Earlier quoted context omitted.

Do you think the people who makes rules and legislation are that smart?

No, but I expect the judges who interpret the law to see that. No judge will send a google employee to prison because someone located in Iran managed to download a copy of the docker image to Alpine Linux from the google/amazon container registry...

They also won’t reimburse said employee for the lawyer they needed to hire or the lost revenue from being in court and not at work.

Even if vindicated, the process can be costly.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#63
This is not limited to Cloudflare. Google has the same issue and it turns out the IPs were being used by the Iranian hosting companies connected to internet surveillance but they keep moving around. So far we only observed this in Hetzner German DCs, which is consistent with the news about illicit activities by Iranian companies in Germany, two years ago during the last uprising against the Iranian government (the Woman, Life, Freedom movement)

We also wrote about this https://blog.cloud66.com/hetzner-connectivity-issues-due-to-...

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#65

Earlier quoted context omitted.

Which is plainly stupid. They should interpret the law to mean "We will treat every request from Iran as a non-paying customer, and won't offer anything outside the free-tier" Even if that isn't the way was written , it is plain that it falls within the intent of the law, and is beneficial to US businesses.

How is it stupid? You de-risk your enterprise significantly by cutting Iran out completely, and you only lose the handful of dollars this would’ve translated into down the road. Some customers aren’t worth having.

I'm a Hetzner customer in Australia that have moved away a big part of my workloads which was CI related as most build would start to fail with some access denied error calling various registries. I had a bunch of deep integration through their API as well which had to be reworked because that issue made it a no go anymore.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#66

Earlier quoted context omitted.

Which is plainly stupid. They should interpret the law to mean "We will treat every request from Iran as a non-paying customer, and won't offer anything outside the free-tier" Even if that isn't the way was written , it is plain that it falls within the intent of the law, and is beneficial to US businesses.

How is it stupid? You de-risk your enterprise significantly by cutting Iran out completely, and you only lose the handful of dollars this would’ve translated into down the road. Some customers aren’t worth having.

Banning an entire country and punishing its innocent citizens feels extreme. It doesn't seem right that, for example, an Iranian student can't use cloud services. Ban commercial and government entities, not the individuals.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#67

I'm frequently reminded how thankful I am to live in a country with a strong, positive international reputation. Even ignoring actual quality-of-life stuff associated with where I live - simply not being from a country with a "dodgy" reputation makes many things so much easier. I don't have to think about blocked websites. Companies accept my payments. Couriers ship to me. With my passport, I walk straight to the fro…

I live in a small EU country. There are many, many american sites that just block the whole EU IP ranges becaus they don't want to deal with GDPR.

Are there? I only someones stumble upon some medical website that redirects me to a "tracking free" empty static page[1] if I come from Europe and opt-out of cookies (which I always do anyway). Maybe we visit other parts of the internet, I don't read a lot of non-IT English things.

[1]A big troll that I respect.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#68

it's pretty absurd that cloudflare can just effectively cripple a cloud provider by tagging part of their IPv4 range as Iranian and not fixing their issues in over a year (and AFIK have no intention to fix them at all) like I wonder if Hetzner has any way to legally force them to stop misclassifying their IP

What's absurd to me is that Cloudflare gains more and more control over the internet, by people voluntarily submitting to its domination. My favorite is trying to go someone's random blog with like 5 posts (because they have a singular post about the technical topic I'm trying to figure something out about) and I can't access the site because Cloudflare has decided my locked-down Firefox ("resist fingerprinting" + st…

[deleted]

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#69

Earlier quoted context omitted.

I live in a small EU country. There are many, many american sites that just block the whole EU IP ranges becaus they don't want to deal with GDPR.

Are there? I only someones stumble upon some medical website that redirects me to a "tracking free" empty static page[1] if I come from Europe and opt-out of cookies (which I always do anyway). Maybe we visit other parts of the internet, I don't read a lot of non-IT English things. [1]A big troll that I respect.

Absolutely. Many small regional newspapers are inaccessible from Europe; omny.info (which would be very interesting to tourists visiting NYC, as you can pull your trip reports there) bans most EU IPs too (but weirdly leaves some countries open).

Most frustrating is not even being able to cancel things like a US streaming service subscription from an EU IP (of course these things usually have no contact email address available either).

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#70
post #46

Earlier quoted context omitted.

Unless you happen to not be aligned with or really on the wrong side of that fabled ideal power monopole. It can quickly knock you from ignorance to reality. Imagine Russia was that monopole of power. Or look no further than a dictatorship. Great if your interests align or you're willing to bend them until they do, hell if they don't. The US is the closest thing we have to a monopole these days and I'm sure it's swee…

"According to a 2024 analysis by The Washington Post, 60% of low-income countries were under some form of U.S. financial sanction. The analysis also concluded that the U.S. imposes three times as many sanctions as any other country or international body." - from https://en.wikipedia.org/wiki/United_States_sanctions Really quite ridiculous that there are sanctions on something like 1/3 of the world.

From that same link, financial sanctions against a country can be one of any of the following:

* authority to prohibit U.S. citizens from engaging in financial transactions with the individuals, entities, or governments on the list, except by license from the U.S. government

* requiring the United States to oppose loans by the World Bank and other international financial institutions,

* diplomatic immunity waived, to allow families of terrorism victims to file for civil damages in U.S. courts,

* tax credits for companies and individuals denied, for income earned in listed countries,

* duty-free goods exemption suspended for imports from those countries, and

* prohibition of U.S. Defense Department contracts above $100,000 with companies controlled by countries on the list.

If we look at the map on that same page, we can see that very few countries have a total financial sanction such as the likes of Iran.

> Really quite ridiculous that there are sanctions on something like 1/3 of the world.

Sanctions are one of the de facto tools in the arsenal of American soft diplomacy. To be frank, the US has so many sanctions because the USD is so powerful.

Post reply on HN