Live data from Hacker News

Turns out half the internet has a single-point-of-failure called “Cloudflare”

easydns.com

221–230 of 414 posts

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#221

Earlier quoted context omitted.

Provided by the government.

I wonder if there are people out there who don't want internet infrastructure to be run by the government specifically because the government would protect freedom of speech "too much".

[deleted]

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#222
post #108

Earlier quoted context omitted.

Why would firing someone make you feel like reparative measures have been taken?

Reparations would show an actual sense of responsibility. Firing someone would be appropriate if they were negligent. Other measures might be more appropriate. Is it enough that any time there's a Cloudflare incident, all we get are lengthy blog posts and sorries from Cloudflare?

> Firing someone would be appropriate if they were negligent

Maybe, but making mistakes is far from negligence. Besides which, if a single person can accidentally break your system, at least at Cloudflare's scale, that's an organizational failure, not a personal failure.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#223
post #81

Earlier quoted context omitted.

Congratulations with growing so big. Why aren't there dozens of lookalikes by now? I mean CDNs that will let you override the origin's cache instructions and do a decent job of DDOS protection, and whose feature list otherwise looks a little like Cloudflare's.

Yes, why isn't the CDN a commodity?

CDNs are expensive to build, and often not very useful to customers until you've built out a large portion of it (actual hardware required, you can't just run it atop AWS). On top of this, much of the money is in Enterprise. So you've got to compete with Akamai, AWS, Fastly, Incapsula, Cloudflare, and several other notable ones to get any customers to speak of.

There are smaller CDNs out there. You can find them readily enough.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#224
I think people are Cloudflare fans simply because so many other services suck more.

I gave Cloudflare a fair shake. But after hearing their lies way too many times, I'm calling them out for being deceptive and unscrupulous.

After being told that sites pretending to host Adobe Flash updaters and pretending to be Bank of America can't be taken down by Cloudflare because of their rights to free speech, I knew their attempts to pretend to be one of us, attempts to pretend to care, were nothing but bullshit.

They claim they don't host. If hosting DNS is not hosting, then what do you call DNS hosting? You literally CANNOT use their abuse web form to report domains which use Cloudflare just for hosting DNS. They do not handle abuse sent to their abuse email address (they simply send a form response saying to spend ten minutes filling out their crappy form that has all sorts of problems).

Of course, their web proxy services are also "not hosting", even though they're protecting all sorts of scammers.

So why should we think they're not bullshitting us when they run 1.1.1.1 and tell us they're not logging? Why should we trust them more than our ISPs by running DoH through them?

They WANT us to be dependent on them, because the more control they have, the more money they can make. It's dangerous, and they've shown they have no honor.

I've genuinely tried to correspond with them on Twitter, and they excel at not answering the question asked but instead just diverting. It's scummy, unprofessional behavior and I encourage everyone to consider whether they deserve anyone's data or business.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#225
post #77

Earlier quoted context omitted.

Cloudflare is a relatively cheap "lite CDN" for developers who want caching without putting in any work. This becomes a gateway drug for Cloudflare's more expensive plans once you outgrow the free plan. It quickly adds up; I worked for a company that wasn't even on an enterprise plan and was spending hundreds of dollars a month on Cloudflare just because they had a lot of domains. My reservation with Cloudflare is th…

In my experience, it's extremely rare to find a CDN that doesn't expect to do TLS termination. My understanding of TLS is that it's exceptionally difficult to cache content if you cannot see into the requests. Perhaps I have overlooked something?

> My understanding of TLS is that it's exceptionally difficult to cache content if you cannot see into the requests.

Not even "exceptionally difficult", but flat-out impossible. From the perspective of an observer, TLS sessions are random data. The protocol is specifically designed to defeat attempts to replay data -- a CDN is indistinguishable from an attacker in that sense.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#226
post #223

Earlier quoted context omitted.

Yes, why isn't the CDN a commodity?

CDNs are expensive to build, and often not very useful to customers until you've built out a large portion of it (actual hardware required, you can't just run it atop AWS). On top of this, much of the money is in Enterprise. So you've got to compete with Akamai, AWS, Fastly, Incapsula, Cloudflare, and several other notable ones to get any customers to speak of. There are smaller CDNs out there. You can find them read…

Yes, but for a customer it's trivial to swap out one CDN for another, isn't it?

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#227
post #139

Earlier quoted context omitted.

I suspect customers complaining on Twitter are not the ones cared about to whoever decides to use Cloudflare.

I build an app. I use CF for my app. Customers use my app. CF has an outage. Customers don't care why I'm down, they care that my app isn't working.

What is your solution for never going down?

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#228
post #223

Earlier quoted context omitted.

CDNs are expensive to build, and often not very useful to customers until you've built out a large portion of it (actual hardware required, you can't just run it atop AWS). On top of this, much of the money is in Enterprise. So you've got to compete with Akamai, AWS, Fastly, Incapsula, Cloudflare, and several other notable ones to get any customers to speak of. There are smaller CDNs out there. You can find them read…

Yes, but for a customer it's trivial to swap out one CDN for another, isn't it?

Depending on how you integrated it and how deeply, it may be trivial. Certainly going from one DNS-based CDN to another can be pretty easy - a Cloudflare / CloudFront swap could be quick.

Which suggests to me that CDNs are already a commodity in some ways.

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#229
post #81

Earlier quoted context omitted.

Read our S-1, it's all in there. https://www.sec.gov/Archives/edgar/data/1477333/000119312519...

Congratulations with growing so big. Why aren't there dozens of lookalikes by now? I mean CDNs that will let you override the origin's cache instructions and do a decent job of DDOS protection, and whose feature list otherwise looks a little like Cloudflare's.

One answer - It's much, much harder to build and operate a global network infrastructure that it might seem. It's also even harder to invent some sort of "killer feature" or other genuine innovation on the experience. You're likely not using Cloudflare simply for commoditized pipes alone, but for other features or designed experiences in their offering.

A second answer - there are a bunch of bottom-barrel commoditized pipe services. You likely haven't heard of them because they're so generic. They've existed before Cloudflare, and more will be created in the future https://www.citrix.com/products/citrix-intelligent-traffic-m...

Re: Turns out half the internet has a single-point-of-failure called “Cloudflare”

#230
post #71

Many of us don't even know it. My DNS for PortableApps.com is run through Digital Ocean, which uses Cloudflare for DNS.

On an unrelated note. Thank you so much for PortableApps.com! It was invaluable at university when studying in the library. To this day, I still use it for utilities that don't need to be installed on my desktop.

You're welcome, I'm glad it's helped and helping you! I try to keep it growing and relevant with a more synced cloud folder/work or school laptop/keep work and personal separate bent these days.
Post reply on HN