CloudFlare hosts reddit, is that correct?
To clarify terminology -- CloudFlares does not host websites. They provide DNS service and performance/security services.
CloudFlare Is Now a Google Cloud Platform Technology Partner
31–40 of 88 posts
Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#32What does this add? Before the partnership, could gce users not use cloudflare? Does the peering agreement result in lower transit costs on my gce bill?
Did you read the post, specifically the benefits section? Or the Google page they linked: https://www.cloudflare.com/google
It sounds like they now have a peering agreement so Google can directly communicate with CloudFlare's network, resulting in 2x faster performance. It looks like that's the primary benefit (other than the regular benefits of CloudFlare).
Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#33What does this add? Before the partnership, could gce users not use cloudflare? Does the peering agreement result in lower transit costs on my gce bill?
Did you read the post, specifically the benefits section? Or the Google page they linked: https://www.cloudflare.com/google It sounds like they now have a peering agreement so Google can directly communicate with CloudFlare's network, resulting in 2x faster performance. It looks like that's the primary benefit (other than the regular benefits of CloudFlare).
3rd item under "Comments" -- https://news.ycombinator.com/newsguidelines.html
Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#34What does this add? Before the partnership, could gce users not use cloudflare? Does the peering agreement result in lower transit costs on my gce bill?
Did you read the post, specifically the benefits section? Or the Google page they linked: https://www.cloudflare.com/google It sounds like they now have a peering agreement so Google can directly communicate with CloudFlare's network, resulting in 2x faster performance. It looks like that's the primary benefit (other than the regular benefits of CloudFlare).
They never actually say that the peering agreement results in 2x faster performance, just that they use SPDY for 2x speed (which is something they've been doing for a while now).
>2x Web Performance Speed - CloudFlare uses advanced caching and the SPDY protocol to double web content transfer speeds, making web content transfer times significantly faster.
Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#35Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#36CloudFlare hosts reddit, is that correct?
They reverse-proxy reddit (and hacker news) - but they don't actually host the website (i.e. the application, databases, etc).
Does that mean when I make a request to reddit or HN, CF fetches the data and I get it through their proxy? Or am I missing something ...
Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#37CloudFlare hosts reddit, is that correct?
Yes. The NS records list reddit nameservers (usually you need to use CF nameservers for using their service, using your own nameservers require more config) but the A records list CF IPs (free users just get two IPs, reddit has quite a lot) reddit.com. 22 IN A 198.41.209.143 reddit.com. 22 IN A 198.41.208.141 reddit.com. 22 IN A 198.41.209.137 reddit.com. 22 IN A 198.41.208.139 reddit.com. 22 IN A 198.41.208.143 redd…
So is that like load-balancing out from reddit.com to all those IPs, is that the purpose of so many?
Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#38Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#39Earlier quoted context omitted.
They reverse-proxy reddit (and hacker news) - but they don't actually host the website (i.e. the application, databases, etc).
Does that mean when I make a request to reddit or HN, CF fetches the data and I get it through their proxy? Or am I missing something ...
Yes.
Re: CloudFlare Is Now a Google Cloud Platform Technology Partner
#40This is sorta an internet architecture question for those in the know. Assuming there's no issue with client reachability/latency, what's stopping CloudFlare from having a single IP? Suppose the IP was behind a fat enough pipe, why not load balance behind it instead of DNS load-balancing in front of it (and additionally behind each as I presume now happens)? Also, if that IP was anycast then you could ignore the issu…
My understanding is that they basically "fast flux" IPs to funnel traffic for targeted attack to a specific data center. So, while you normally may be sharing IPs, if an enterprise customer's website example.com starts getting attacked they will put it on dedicated IPs, then broadcast those IPs from one or two data centers. They will then reroute all other enterprise traffic away from those data centers, thus minimiz…
Thanks for this comment. I guess, along with jgrahamc's sibling comment, you have to make a routing decision based on (source, port) at most if you have a fixed IP, since HTTPS ports are stupidly fixed. That is 32+16 bits of info at most, so an ethernet MACs worth. So now I can clarify my question as follows: with X bits of data, what is the present state-of-the-art latency wrt to routing T Gbps of traffic. And it's not just that, you have to have good latency for updating that routing table.
Any research on the real entropy of (source,port) entropy on the Internet? The are also real issues like the distribution of (source, port) is hardly uniform, and is especially nasty when undergoing an attack, i.e. you want to manage latency based the both the distribution and authenticity of traffic.
This is a very interesting mathematical problem. I have to work on expressing it a bit better before I can hope of formulating a solution, but yes I can totally see now how leveraging BGP, anycast, and DNS TTL are all knobs to heuristically solve this problem, instead of a some crazy genius way of making use of router TCAM silicon.