And their quarterly earnings reports are due today. Ouch.
Cloudflare API Down
101–110 of 211 posts
Re: Cloudflare API Down
#102This is not looking good. I really hope they don't move away from dogfooding because of this. Also vercel deployments (and edge functions in general) aren't working. Their status page says: "We identified the root cause as an issue with one of our upstream providers and working with them towards mitigation." I wonder if edge functions use workers under the hood lol. LINK: https://www.vercel-status.com/
Digital Ocean too: https://status.digitalocean.com/incidents/bw3r3j9b5ph5
I don't know if I should be proud or scared that a lot of these products are just wrappers around Cloudflare offerings.
In this case I don't think its a wrapper, DOs App Platform is a bit too sophisticated to be on workers. I'm guessing a bunch of key workloads using workers.
Re: Cloudflare API Down
#103I dunno. Cloudflare gives me the creeps. I have no idea why so many folks think large swaths of the Internet should be reliant on a single company.
> I have no idea why so many folks think large swaths of the Internet should be reliant on a single company.
It's not just the reliance, but the fact that cloudflare is a MITM attacker (by design) on vast amounts of TLS traffic. TLS if used properly gives you end to end security, but if you use cloudflare they have access to all your cleartext traffic.
Re: Cloudflare API Down
#104Earlier quoted context omitted.
How many little sites do you run that get hit by DDoS? I personally run about 10 tiny websites myself, some of them have around ~1-2K daily active users, but neither of them have suffered from any DDoS frequently nor do they use CloudFlare at all. One has been hit once by a DDoS that kept trying for ~2 days to bring the site down, but a simple "ban IPs based on hitting rate limits" did the trick to avoid going down,…
good luck with all those strawman replies... It only takes one trivial event to make you a cloudflare zealot, most ISPs (web hosts) don't provide attack mitigation nor prevention. If you didn't know that you could ban IPs programtically you'd have been screwed* and would have loved how quickly cloudflare would protect your site. It's not a difficulty thing, it's an ignorance thing. cloudflare isn't better,or magic, i…
What's the correct way to do things if I don't want to use Cloudflare for attack mitigation?
Re: Cloudflare API Down
#105Earlier quoted context omitted.
This can just be multiple datacenters located close together (~100 km) similar to AWS AZs.
Fun fact, on certain (major) cloud providers, in certain regions, AZs are sometimes different floors of the same building :)
You may be obligated not to name them, but I'm not: Google.
Re: Cloudflare API Down
#106The most impressive thing is: The status page actually works
Isn't it ironic that of all the services failing the status page never seems to go down? Of course it's likely hosted somewhere else, but I always chuckled and thought the same thing when there was a major outage somewhere.
Re: Cloudflare API Down
#107Earlier quoted context omitted.
How many little sites do you run that get hit by DDoS? I personally run about 10 tiny websites myself, some of them have around ~1-2K daily active users, but neither of them have suffered from any DDoS frequently nor do they use CloudFlare at all. One has been hit once by a DDoS that kept trying for ~2 days to bring the site down, but a simple "ban IPs based on hitting rate limits" did the trick to avoid going down,…
> How many little sites do you run that get hit by DDoS? Do you live in a country that has enemies? DDoS attacks are one of the primary weapons of cyberwarfare. You may not have suffered an attack yet, but thinking the world is a peaceful place in which small players have no worries is naïve.
> Do you live in a country that has enemies?
Who doesn't?
> You may not have suffered an attack yet
But I literally shared in my previous comment that I have?
> thinking the world is a peaceful place in which small players have no worries is naïve
I agree, and I guess I'm lucky for not holding such opinion then.
Re: Cloudflare API Down
#108Earlier quoted context omitted.
That was yesterday. They announced pricing changes for Cloudflare workers. I think it won't affect me but heavy workloads will have to pay more. They used to charge a flat fee but now are moving to $/CPU time. Overall I still love Cloudflare and run all my backend stuff there. It just feels simpler and cleaner than AWS but it's slowly starting to get cluttered as more features are released.
? They announced that on 28/09 fyi. It's not new and they didn't change a flat fee before. They still have the 5 € / month fee. https://blog.cloudflare.com/workers-pricing-scale-to-zero/
You're right. The email yesterday was that the voluntary opt in period to the new pricing was starting. Everyone will be switched over on March 1st.
Re: Cloudflare API Down
#109Earlier quoted context omitted.
No free (or even cheap) alternatives exist. If you have a little site that might be a DoS target, you have to use it.
How many little sites do you run that get hit by DDoS? I personally run about 10 tiny websites myself, some of them have around ~1-2K daily active users, but neither of them have suffered from any DDoS frequently nor do they use CloudFlare at all. One has been hit once by a DDoS that kept trying for ~2 days to bring the site down, but a simple "ban IPs based on hitting rate limits" did the trick to avoid going down,…
I personally don't usually use it, but if I ran a Mastodon instance or blog or anything with real traffic and limited bandwidth and the slightest potential to piss someone off, I would. I am definitely not surprised by the amount of people using it.
Re: Cloudflare API Down
#110Cloudflare really embarrassed me:
I had attempted to do an ad hoc demo for my client in a morning meeting. Whoops.