Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Free DDNS with Cloudflare and a cronjob

github.com

Post reply on HN
Print view View original

101–110 of 202 posts

Re: Free DDNS with Cloudflare and a cronjob

#101

Post by gunapologist99 »

skinner927 wrote: post #88
vladvasiliu wrote: post #80

Earlier quoted context omitted.

Well, one of the "challenges" is the one in a different comment: most registrars don't allow fine-grained control over who can update what DNS records. Can it be done? Sure. But do I want to spend money on this for my home lab if I can work around it? Not a chance. I'm kinda sensitive to the "MITM as a service" argument, but for my use case, it's not a problem.

You don’t need automated DNS fiddling for lets encrypt. Certbot can either hook into Apache or NGINX, or run its own standalone server for verification.

Aside from sibling comment, you also need automated DNS fiddling if you want CloudFlare Strict TLS support, because if LE can only connect to CF proxy, it will never issue via HTTPS.

Re: Free DDNS with Cloudflare and a cronjob

#103

Post by gunapologist99 »

thousand_nights wrote: post #34
jsheard wrote: post #29

Earlier quoted context omitted.

Video streaming in general is one of their red lines, you're not supposed to shove any kind of video through their CDN unless the origin is another Cloudflare product (e.g. CF Stream or R2).

From the discussions I've read, it's not as clear cut, e.g.: https://old.reddit.com/r/PleX/comments/152wfdh/can_i_use_a_c...

Agreed with sibling, but TBH if you're just using it for personal streaming, it's not likely to trip any bandwidth alerts on a free account, and CF will probably be happy that you're using it for personal stuff (because you'll probably take it with you to your day job too)

Re: Free DDNS with Cloudflare and a cronjob

#104

Post by kbar13 »

wiradikusuma wrote: post #99

For those who depend on Cloudflare extensively and have some traffic, I have a question: I was researching whether it's worth it to switch my pet project to Cloudflare's various offerings (D2, Workers) instead of AWS/GCP, since Cloudflare has a very generous free tier. But from quick googling (I think it's Reddit), some people said Cloudflare uses bait-and-switch where at some point you will need certain features tha…

it's only a bait and switch if you pay for something that they then pull out from under you. this is just called a free trial

Re: Free DDNS with Cloudflare and a cronjob

#105

Post by networked »

macote wrote: post #59
teamspirit wrote: post #12

Earlier quoted context omitted.

https://www.cloudflare.com/cdn-cgi/trace will return your ip.

This is how I use it in my bash script: current_ip=$(curl -s -X GET https://1.1.1.1/cdn-cgi/trace | grep -Po "(?

I find awk more clear for this kind of job. You can replace

  grep -Po "(?
with

  awk -F= '$1 == "ip" { print $2 }'

Re: Free DDNS with Cloudflare and a cronjob

#107

Post by jsheard »

gunapologist99 wrote: post #101
skinner927 wrote: post #88

Earlier quoted context omitted.

You don’t need automated DNS fiddling for lets encrypt. Certbot can either hook into Apache or NGINX, or run its own standalone server for verification.

Aside from sibling comment, you also need automated DNS fiddling if you want CloudFlare Strict TLS support, because if LE can only connect to CF proxy, it will never issue via HTTPS.

You don't necessarily need to do that, Cloudflare can generate you a long-lived certificate to install on your origin server which isn't publicly trusted but is trusted by their proxies, so it works with Strict TLS. YMMV with other CDNs though, you might need to fall back to using LE with a DNS challenge in some cases.

https://developers.cloudflare.com/ssl/origin-configuration/o...

Re: Free DDNS with Cloudflare and a cronjob

#108

Post by password4321 »

thousand_nights wrote: post #34
jsheard wrote: post #29

Earlier quoted context omitted.

Video streaming in general is one of their red lines, you're not supposed to shove any kind of video through their CDN unless the origin is another Cloudflare product (e.g. CF Stream or R2).

From the discussions I've read, it's not as clear cut, e.g.: https://old.reddit.com/r/PleX/comments/152wfdh/can_i_use_a_c...

Just don't show up on some motivated salesperson's prospects report.

https://news.ycombinator.com/item?id=40481808#40482405

Re: Free DDNS with Cloudflare and a cronjob

#109

Post by judge2020 »

wiradikusuma wrote: post #99

For those who depend on Cloudflare extensively and have some traffic, I have a question: I was researching whether it's worth it to switch my pet project to Cloudflare's various offerings (D2, Workers) instead of AWS/GCP, since Cloudflare has a very generous free tier. But from quick googling (I think it's Reddit), some people said Cloudflare uses bait-and-switch where at some point you will need certain features tha…

> But from quick googling (I think it's Reddit), some people said Cloudflare uses bait-and-switch where at some point you will need certain features that are only available in enterprise plan or something, basically significant cost increase.

Cloudflare is only "free" for hosting websites; doing something like hosting just images or binary data and pushing hundreds of gigabytes or terabytes a month is likely to get your domain dropped from Cloudflare [0]. However, they do allow these non-website use cases (like hosting binary files, tons of images, etc) when using their third party products like R2 and/or Workers.

But, even with those stipulation, they do have a somewhat dubious sales tactic where, if you're pushing a lot of data, they:

- send you an email saying "you're using a lot of data"

- Have a line threatening you to "pay us to safeguard your website from potential suspension or restricted access"

- If you don't pay, you're in limbo on whether or not you're actually violating T&S and should make plans for being dropped by CF

Going over X0 TB/mo seems to be the threshold for getting put in this sales funnel, based on the few instances i've seen, but I can't confirm it. In some of these cases, the accounts survived, and in others they were dropped, so this isn't always a death sentence.

I would be incredibly grateful if Matthew Prince / eastdakota commented on this sales tactic, because it's obvious that some sales EVP at some point in time said "When Trust & Safety flags a customer for bandwidth reasons, we need to try to upsell them before T&S can review and make a determination for the account", which seems incredibly bad manners with how often CF speaks about their anti-"bandwidth rent seeking" philosophy[1].

0: https://community.cloudflare.com/t/the-way-you-handle-bandwi...

1: https://blog.cloudflare.com/aws-egregious-egress

Re: Free DDNS with Cloudflare and a cronjob

#110

Post by e12e »

coda_ wrote: post #49
noname120 wrote: post #17

Earlier quoted context omitted.

There are some limitations such as: – TLS termination mandatorily happens at Cloudflare (i.e. your traffic is mitm'ed). That's because this free product is meant as a gateway drug (aka a loss leader) to Cloudflare's WAF/Anti-DDOS products (which require TLS termination to happen on their side for technical reasons). – Other TCP protocols (including SSH) require every client to run the software too. So if you were thi…

They do allow ssh via a web browser. It may be a "beta" feature, but it doesn't require the client to run anything.

Requires your client to run a web browser though? That's a lot different from just an ssh client?
Post reply on HN