Live data from Hacker News

Issues with Cloudflare Images

blog.klungo.no

101–110 of 152 posts

Re: Issues with Cloudflare Images

#102
post #17

Thanks for the feedback. I'm on the CF Images product team. We will allow the download of the original images, it is actually one of the next features coming up. Also we will introduce webhooks and Images Analytics next.

"it is actually one of the next features coming up" is one of the most annoying things I hear from enterprise companies that I have issues with. I have received this response and waited for the feature for over a year or have never seen it released at all. Thank you for the response, but, at the end of the day, people are going to judge Cloudflare on how quickly and accurately they can solve these issues.

I assure you it's not just you. I see it from the other end as well. Not long ago I had a client shout "I don't want to hear about your roadmap!" and grab his team and walk out of a meeting. We really shouldn't have used that terminology there, since the feature they needed was actually already in beta test with a few friendlies, we could have added them to the beta test cohort on the spot, and demonstrated it in their account during the meeting.

(Personally, I'm kinda glad we didn't. They were without doubt the sort of customer we should have already fired...)

Re: Issues with Cloudflare Images

#103

I thought Cloudflare was going to win the image hosting/serving/resizing game based on their original blog post, but that doesn't seem to be the case. I kept getting frustrated with the complexity and changing costs of solutions out there, so about a year ago I launched https://www.simplefileupload.com . It's a super easy, flat rate cost solution to quickly allow users to upload images and files. It provides a custom…

This doesn’t really seem to solve any of the issues raised in the blog post though?

The limit is 5MB, and the default cost per month would allow you to serve 3.5M images from CF.

Re: Issues with Cloudflare Images

#104
post #88
post #18

Earlier quoted context omitted.

I remember there was another article about image uploads and content moderation (here: https://news.ycombinator.com/item?id=28684250 ), essentially saying that if you create a open uploading service, you WILL start getting lots of spammy images / abuse. CF Images always seems like a LOT more $$ than other image hosting tools out there. What other service did you end up going with?

How does imgur stay alive, out of curiosity.

[deleted]

Re: Issues with Cloudflare Images

#105
post #6

I've run into a lot of these issues using it and I've even reported them on every available channel. The original image is my biggest complaint. I was making a service where users would want to batch retrieve what they've uploaded. No response on the forums to that. Also hit the CORS issue, so rather than fetching an image and loading it into a canvas I have to use a fake image element. This makes the canvas untruste…

Maybe I'm dense, but what's the usecase of downloading an original image from CDN? You upload it to distribute widely, and then lose it?

Re: Issues with Cloudflare Images

#106
Is there an image (or video) service that does:

* You bring your own storage

* You bring your own CDN

For instance, you configure your CloudFront distribution to source from the Image Transformation service. You configure your Image Transformation service to source from your S3 bucket.

This seems like the best of all worlds to me. Does this exist?

Re: Issues with Cloudflare Images

#107

For anyone looking for an alternative, https://imgproxy.net/ works v. well.

Yes, by far my top choice in OSS land for image manipulation. You would probably want to couple it with a edge worker to do things like accept handling (what format to return for the same url), whitelisting formats and so on.

I wrote a pretty comprehensive cloudflare worker for this years ago I should look at open sourcing..

Re: Issues with Cloudflare Images

#108

Earlier quoted context omitted.

"it is actually one of the next features coming up" is one of the most annoying things I hear from enterprise companies that I have issues with. I have received this response and waited for the feature for over a year or have never seen it released at all. Thank you for the response, but, at the end of the day, people are going to judge Cloudflare on how quickly and accurately they can solve these issues.

I assure you it's not just you. I see it from the other end as well. Not long ago I had a client shout "I don't want to hear about your roadmap!" and grab his team and walk out of a meeting. We really shouldn't have used that terminology there, since the feature they needed was actually already in beta test with a few friendlies, we could have added them to the beta test cohort on the spot, and demonstrated it in the…

I can empathize with the customer here. I have also seen it from the other end, working for a large and slow SAAS organization. I see PMs always wanting to show the customer the "roadmap" because they think it somehow appeases the customer and calms their wrath. The wiser customers know that a roadmap is not a promise, and will take it with a huge grain of salt. I have grown to almost despise the word or mention of it. Quit with the meetings and compliance reviews and politics and just get stuff done for god's sakes.

Re: Issues with Cloudflare Images

#109

"5. Lack of dynamic resizing, only 20 “variants” allowed" Best practice when it comes to images on the web is to use a fixed number of sizes. Why they limited it to 20 I do not know though. You should never allow dynamic image resizing since it is commonly used in various attacks.

> Best practice when it comes to images on the web is to use a fixed number of sizes.

What is the idea behind this? It doesn’t seem to add anything other than to leverage caching a bit better.

Re: Issues with Cloudflare Images

#110
post #47

Earlier quoted context omitted.

I worked with sites that had performance issues because of attacks against dynamic image scaling in Cloudflare (scaling probably done with workers). Services like Cloudflare does not in general protect against service design issues. I try to explain that to people all the time. I also worked with another provider where a monthly bill got 5 times higher one month because images were requested at many different large s…

Yeah, I've come across sites that allow arbitrary resizing via dimension numbers in the URL. Seems like it would be easy to CPU ddos by submitting random numbers in those fields.

You could do the same by requesting any dynamic page many times.

Adding a rate limit to image resizing is no harder than adding it to any other URL.

Post reply on HN