Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

ciphercue.com

Post reply on HN
Print view View original

401–410 of 412 posts

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#401

Post by strictnein »

mitxela wrote: post #313
strictnein wrote: post #272

Earlier quoted context omitted.

If you just look at the largest 4 of those, you'd have 100Tbps of traffic to monitor, with an average throughput of roughly half of that. That's ~540PB ((50 Tbps / 8 bits) * 86400 seconds/day) of traffic a day with just those four. Add in the rest and you're likely talking ~Exabytes of data each day. And that has to all be processed on site. If someone wants to argue that the NSA is in these facilities I'd be 100% on…

That's nothing a rack full of fast switches can't handle. A rack full of fast switches already does handle it - where do you think the original copy came from? They will get a copy of the whole feed, but not store all of it - they will have heuristics for selecting interesting traffic.

Switches handle data at far faster rate than any hardware can actually inspect it, store it, process it, etc.

But yeah, just a rack of "fast switches" is all it takes to route hundreds of petabytes of data each day. You should let the data center operators know. They'd save billions.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#402

Post by strictnein »

pocksuppet wrote: post #334
strictnein wrote: post #275

Earlier quoted context omitted.

Of course, but the comment I was replying to stated: "the NSA learns everything there is to know about you and your customers" Which implies that they are looking at it all and records it. The vast, vast majority of Cloudflare's traffic is worthless to an intelligence agency.

They are actively scanning all of it, looking for interesting stuff.

How do you do DPI on hundreds of PBs a day? Explain the process that would allow you to "look for interesting stuff".

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#403

Post by mitxela »

inemesitaffia wrote: post #390
mitxela wrote: post #384

Earlier quoted context omitted.

I'd tolerate DDOS-guard - they let you host illegal stuff

I noticed a lot of illegal video sites now host their video itself via CloudFlare. Before they'd use some European host or file locker. I wonder about the economics and how it's hidden.

Cloudflare tolerates illegal stuff but responds to complaints. Ddos guard is russian and just tells American authorities to F off. I think.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#404

Post by mitxela »

aivisol wrote: post #392
mitxela wrote: post #376

Earlier quoted context omitted.

The US also openly supports Russia in its current war, what's the difference?

What do you mean by that? Are they selling any parts and components for military use? Are they buying oil and gas to support their war effort.

All of the above

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#405

Post by mitxela »

ranger_danger wrote: post #394
mitxela wrote: post #375

Earlier quoted context omitted.

The trick is to use the most normal hardware, software and network connection you can think of. Which I assume you aren't doing for ideological reasons, which is fair.

My ISP seems to frequently rotate IPs with other people who can't behave, so my IPs always have garbage reputation... that probably has a lot to do with it as well. How do I know this? I have received reports from various websites (and manually queried some public block lists/RBL/etc.) that my IP range was blocked due to all sorts of different things like open proxies, CSAM etc. even if I've never visited that site b…

This is common for third-world ISPs. Cloudflare would never block, say, Comcast, but they have no qualms about blocking the few largest ISPs in Brazil because who cares about Brazil? Those countries also have IP address shortages because we refused to move the whole internet to ipv6 yet, and may share just a few addresses per city.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#406

Post by mitxela »

theamk wrote: post #387
mitxela wrote: post #370

Earlier quoted context omitted.

They do it at cost with a caveat: you can only ever use Cloudflare for that domain. It's a loss leader.

what? their docs explicitly say nosy of them are not going tobe cloudflare-hosted > Cloudflare does not offer web hosting for most websites https://developers.cloudflare.com/fundamentals/manage-domain...

They force you to use their DNS servers.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#408

Post by mitxela »

strictnein wrote: post #401
mitxela wrote: post #313

Earlier quoted context omitted.

That's nothing a rack full of fast switches can't handle. A rack full of fast switches already does handle it - where do you think the original copy came from? They will get a copy of the whole feed, but not store all of it - they will have heuristics for selecting interesting traffic.

Switches handle data at far faster rate than any hardware can actually inspect it, store it, process it, etc. But yeah, just a rack of "fast switches" is all it takes to route hundreds of petabytes of data each day. You should let the data center operators know. They'd save billions.

Switches do inspect it. They also have a feature designed for wiretapping, which copies a percentage of traffic to another port. They may have a feature to copy 100% of traffic matching a certain filter. Managed switch ASICs have this feature even though it's usually not exposed in the CLI.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#409

Post by pocksuppet »

CommanderData wrote: post #23
Havoc wrote: post #2

Bunny.net is a good alternative - they don’t have CF depth of offerings but are getting there

They don't have Cloudflare Tunnels which is almost too good to pass up. I don't particularly understand how CF makes money on it, with the many high traffic sites I have used that I know don't pay CF a dime. Tunnels adds so much more overhead in compute on both ends more than their normal CDN/proxy would.

You don't pay with money, you pay with the curses^H^H^H^H^H MITM.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#410

Post by pocksuppet »

a2ff6eeb0 wrote: post #117
lukan wrote: post #112

Earlier quoted context omitted.

Yeah, about those I know, but what about cloudflare?

They hold your tls keys and can decrypt all your traffic. They're MITM as a service, by definition. They have to be able to in order to cache and forward appropriately.

And the best way to get people to let you do bad things, is to offer them something good, that uses the same mechanism. If I want to MITM the whole internet, what better way than offering free caching and bot blocking?

I even get to charge the bots extra to bypass the block, and then charge the customers extra to block the bots that are paying extra to not be blocked!

Post reply on HN