Live data from Hacker News

Turns out half the internet has a single-point-of-failure called “Cloudflare”

easydns.com

21–30 of 414 posts

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#21

If only DDOS attacks were taken seriously and their perpetrators punished accordingly (and maybe if the network had better ways of self-defense) instead of companies and websites having to fend for themselves (or having to resort to solutions like Cloudflare).

I am not sure I understand this comment, in the context- cloudflare misconfigured some routes and it was quickly resolved. was this a DDoS?

It was not.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#22
post #9

Okay here's the thing. I'm okay with people bashing other (competing) companies when they do wrong. However, I believe it is somewhat childish and uncalled for to bash another company, because of a mistake. First of all "I use easyDNS so I didn't notice it at all tbh" is not only a childish assertion, it's borderline a falsehood. You DO NOT offer the same services, nor the same scale. (No, VOD would not work if your…

> However, I believe it is somewhat childish and uncalled for to bash another company, because of a mistake.

The thing that they're bashing is not the mistake, which happens to everyone. They're bashing SPOF:

> EasyDNS was unaffected because while we do use Cloudflare to soak up large DDoS attacks against our nameservers, we don’t use them across all of our nameservers. I think somewhere in my book I wrote “DNS providers have a near-pathological aversion to SPOFs” (Single Point of Failures). Maybe only we do.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#24
post #9

Okay here's the thing. I'm okay with people bashing other (competing) companies when they do wrong. However, I believe it is somewhat childish and uncalled for to bash another company, because of a mistake. First of all "I use easyDNS so I didn't notice it at all tbh" is not only a childish assertion, it's borderline a falsehood. You DO NOT offer the same services, nor the same scale. (No, VOD would not work if your…

Honestly I didn't notice the domain name, and I actually thought the author was being quite understanding by saying things like "This is inevitable and unavoidable and entirely excusable. Everybody blows up, every DNS provider in existence will experience downtime. No exceptions." and that they use Cloudflare themselves. This is obviously subjective, but to me it didn't come across as "they suck use us" but rather po…

the tone may have been moderate, but the message is smug.

otoh it’s just marketing, and CF is no stranger to it, so i think it’s fair.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#25
> We call it Proactive Nameservers, and we’re the only company in the world doing it for some reason.

Wait, why? [0]:

> Proactive Nameservers is a patent-pending system that optimizes the nameserver delegation for your mission critical domain names.

Oh.

[0] https://easydns.com/dns/proactive-nameservers/

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#26
post #9

Okay here's the thing. I'm okay with people bashing other (competing) companies when they do wrong. However, I believe it is somewhat childish and uncalled for to bash another company, because of a mistake. First of all "I use easyDNS so I didn't notice it at all tbh" is not only a childish assertion, it's borderline a falsehood. You DO NOT offer the same services, nor the same scale. (No, VOD would not work if your…

Honestly I didn't notice the domain name, and I actually thought the author was being quite understanding by saying things like "This is inevitable and unavoidable and entirely excusable. Everybody blows up, every DNS provider in existence will experience downtime. No exceptions." and that they use Cloudflare themselves. This is obviously subjective, but to me it didn't come across as "they suck use us" but rather po…

I think the root cause (which, IMO, you correctly point out) is lost on many modern developers.

For whatever reason there's this modern idea that if a company A is paying money to company B for a service, that company B will handle all the 'hard stuff' for them.

The end result is we have a lot of applications/infra built with SPOFs, in some cases known, but in many, swept under the rug and abstracted away to passing the buck in case of a large failure (i.e. major AWS/Cloudflare/Azure outages).

You also see this at times when vendors pitch internal software solutions. I've been at more than one shop where a vendor's 'silver bullet' turned into a SPOF time-bomb because nobody considered this company's solution could fail. After all, the sales presentation said it had %nines%!

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#27
post #6

It's interesting to me that Cloudflare doesn't really have any competition with a similar business model. I suppose the free plan requires quite a lot of spending before the upgrades offset it.

I don't need a free tier. I just need a "basic bitch" tier for my personal usage. Who are some Cloudflare alternatives for this?

Depends on what you want but a very solid free CDN and DNS option is: host your site on netlify and use dns.he.net for your nameservers.

Another good DNS option is dnsimple.com or, indeed, EasyDNS. For even more redundancy, use one provider as your domain registrar and another for your nameservers (and set short TTLs for your zones so you can re-point IPs quickly if you need to).

For the other things Cloudflare offers on their free tier, I'm not sure what good alternatives exist (there must be some, I'm just not familiar with them outside of the obvious AWS alternatives).

Edit: one caveat with above advice, I have no idea if netlify use cloudflare behind the scenes...

Edit 2: For other options, checkout https://www.cdnperf.com/ and https://www.dnsperf.com/

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#28

If only DDOS attacks were taken seriously and their perpetrators punished accordingly (and maybe if the network had better ways of self-defense) instead of companies and websites having to fend for themselves (or having to resort to solutions like Cloudflare).

I am not sure I understand this comment, in the context- cloudflare misconfigured some routes and it was quickly resolved. was this a DDoS?

His point is why the internet has a single point of failure -> Cloudflare. They offer DDoS protection for free.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#30

If only DDOS attacks were taken seriously and their perpetrators punished accordingly (and maybe if the network had better ways of self-defense) instead of companies and websites having to fend for themselves (or having to resort to solutions like Cloudflare).

I am not sure I understand this comment, in the context- cloudflare misconfigured some routes and it was quickly resolved. was this a DDoS?

I think the point was that so many companies wouldn't have to rely on anti-DDoS protection from Cloudflare.
Post reply on HN