Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare Flagship

developers.cloudflare.com

Post reply on HN
Print view View original

21–30 of 189 posts

Re: Cloudflare Flagship

#21

Post by 7thpower »

tiffanyh wrote: post #19

This is nice, but I’m still waiting for this to be delivered (which ironically is probably using Flagship): https://blog.cloudflare.com/enterprise-grade-features-for-al... —- I don’t believe a single enterprise only feature has made its way to lower tier (paid) account yet. I’m most interested in: https://developers.cloudflare.com/speed/optimization/content...

Yes, this! I am dying for need of zerotrust enterprise features and am about to have to actually talk to one of the enterprise sales folks, which will chew up a bunch of time and add stress I’d rather avoid.

Re: Cloudflare Flagship

#22

Post by crabmusket »

Looking at the docs for their JS SDK, they have this warning:

> The client provider requires an API token to fetch flag values. This token is not scoped to a single app, so anyone with the token can evaluate flags across all apps in your account. Use the client provider with caution in public-facing applications.

https://developers.cloudflare.com/flagship/sdk/client-provid...

Can anyone clarify... why the client SDK, designed to be deployed to browsers, requires caution? Does this mean that any client could send requests with a new targetingKey and observe other users' flags?

While flags probably shouldn't be critical information, this seems like an interesting design choice.

Re: Cloudflare Flagship

#23

Post by OptionOfT »

crabmusket wrote: post #22

Looking at the docs for their JS SDK, they have this warning: > The client provider requires an API token to fetch flag values. This token is not scoped to a single app, so anyone with the token can evaluate flags across all apps in your account. Use the client provider with caution in public-facing applications. https://developers.cloudflare.com/flagship/sdk/client-provid... Can anyone clarify... why the client SDK,…

Let's think about it. This is probably something used internally at CloudFlare and someone thought I'd be interesting to make it public.

There is no way 6 months ago someone at CloudFlare thought it was a good idea to build a competitor to say LaunchDarkly.

Re: Cloudflare Flagship

#24

Post by pm90 »

More of this please: essential tools for building modern software must be oss; Im fine with paying for a hosted version but just the benefit of learning one tool and being able to use it everywhere (linux, k8s, python etc) is amazing.

Re: Cloudflare Flagship

#25

Post by isodev »

pm90 wrote: post #24

More of this please: essential tools for building modern software must be oss; Im fine with paying for a hosted version but just the benefit of learning one tool and being able to use it everywhere (linux, k8s, python etc) is amazing.

Cloudflare oss?

Re: Cloudflare Flagship

#26

Post by wahnfrieden »

OptionOfT wrote: post #23
crabmusket wrote: post #22

Looking at the docs for their JS SDK, they have this warning: > The client provider requires an API token to fetch flag values. This token is not scoped to a single app, so anyone with the token can evaluate flags across all apps in your account. Use the client provider with caution in public-facing applications. https://developers.cloudflare.com/flagship/sdk/client-provid... Can anyone clarify... why the client SDK,…

Let's think about it. This is probably something used internally at CloudFlare and someone thought I'd be interesting to make it public. There is no way 6 months ago someone at CloudFlare thought it was a good idea to build a competitor to say LaunchDarkly.

Care to share why

Re: Cloudflare Flagship

#27

Post by wahnfrieden »

aetherspawn wrote: post #3

Cloudflare are winning these days, they’re just lacking good fine grained permissions. You still have to make an entirely separate account for prod, which messes up SSO since one domain can only be bound to one account.

Will never use them without prepayment or spending limit options. Insane to be a bug, attack, or misclick away from 6-7 digit invoice

Re: Cloudflare Flagship

#28

Post by tiffanyh »

7thpower wrote: post #21
tiffanyh wrote: post #19

This is nice, but I’m still waiting for this to be delivered (which ironically is probably using Flagship): https://blog.cloudflare.com/enterprise-grade-features-for-al... —- I don’t believe a single enterprise only feature has made its way to lower tier (paid) account yet. I’m most interested in: https://developers.cloudflare.com/speed/optimization/content...

Yes, this! I am dying for need of zerotrust enterprise features and am about to have to actually talk to one of the enterprise sales folks, which will chew up a bunch of time and add stress I’d rather avoid.

I don’t think zero trust will be anytime soon, based on this post:

https://community.cloudflare.com/t/making-enterprise-product...

Re: Cloudflare Flagship

#29

Post by ec109685 »

Missing gradual rollout of feature flag changes themselves. Yes, you can do percentage based rollouts for individual features but still should have ability to canary all changes before they cause an insta-sev.

Re: Cloudflare Flagship

#30

Post by zuzululu »

A bit tangent but related: These things I'm never sure if I should be shipping on day one with mobile apps (Flutter in particular): Flagships, bug gathering, A/B testing ?

I feel strong inclination too but its also way too early before any real users can prove PMF. I've been using Google stuff but wonder if Flagship and perhaps other Cloudflare offerings can help.

The other side is that again it feels too early for this stuff and I just want to ship something quickly.

The work ivnvolved

Post reply on HN