Both Lemmy.world and my server rely upon Cloudflare for SSL, DDOS protection, CDN services, etc. I use it to provide me with a Cloudflare tunnel to get around not being able to forward ports.

Outages have put this dependance to question, and the same with recent news about the US government obtaining data through subpoenas. It’s a free service that takes care of many of the difficulties when it comes to hosting your service online, but everyone knows that free is not free.

What do you all think about Cloudflare?

all 71 comments

sorted by: hot top controversial new old
[–] 92 points 8 months ago

it's making the internet centralized and proprietary, i hate it. i do understand how it's a very easy option for website operators struggling against malicious bots though.

  • source
  • [–] 48 points 8 months ago (6 children)

    Dev here, building a public SaaS app. I'm aware of the centralization arguments, but CF seems to be the least worst of all the options in terms of alternatives. CAPTCHAs are awful, and I can't put up my own multi-Tbps DDOS buffer. I also regularly access my own resources from behind multiple VPNs; other than having to click the human button it doesn't consign me to an evening of identifying traffic lights.

  • source
  • hideshow 6 child comments
  • [–] 35 points 8 months ago (4 children)

    The ones that require traffic lights and shit never seem to work properly for me. They always make me do an endless repetition of them, going through dozens and dozens before it finally, maybe lets me see the website I was trying to get to.

    Maybe I'm just not human enough?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 8 months ago

    I've found that clicking them slower (until the new image is fully faded in) can help for the ones that have images disappearing after clicking, and not actually clicking every square containing part of the traffic light (if it's only a tiny edge) helps with the ones that are one image of a thing. I guess being fast or noticing details isn't human enough. Having to wait is insanely annoying though.

  • source
  • parent
  • [–] 41 points 8 months ago (4 children)

    Isn't Cloudflare more like the thin horizontal block above that one?

  • source
  • hideshow 4 child comments
  • [–] 4 points 8 months ago* (2 children)

    That would imply the web stack wouldn't crash if you remove them.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 21 points 8 months ago (1 child)

    This image is inaccurate, because it suggests Cloudflare is a small block. The original xkcd makes more sense, because it is a project run by a single person. To represent Cloudflare, it should be a huge block given it's a very large company with a market cap of $69 billion.

  • source
  • hideshow 1 child comment
  • [–] 19 points 8 months ago (1 child)
    load more comments (1 reply)
    [–] 17 points 8 months ago*

    It's a free way to get a reverse proxy for a self hosted website and not expose your home IP and avoid attacks, so kind of hard to pass up tbh.

  • source
  • [–] 17 points 8 months ago (2 children)
  • [–] 17 points 8 months ago

    It’s a great service and it works mostly well. The internet is a little bit better because of them.

    It’s also optional and simple to transition away from since they don’t host your environment.

  • source
  • [–] 15 points 8 months ago (2 children)

    Proprietary centralisation and gatekeeping of the internet, built by a profit first company that actively and deliberately protected nazis and kiwifarms until it became financially harmful for them to continue to do so.

    They can fuck right off.

  • source
  • hideshow 2 child comments
  • [–] 15 points 8 months ago

    Decent idea, but too much power centralized to one company.

  • source
  • [–] 14 points 8 months ago (2 children)

    Bane of my existence as obligate VPN user

  • source
  • hideshow 2 child comments
  • [–] 1 point 8 months ago (1 child)

    Can you expand on it? How do websites block vpn? Do they just block all the other countries? Why would you want to visit such websites?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 8 months ago

    Many people using a VPN have the same IP address, and cloudflare and others can track that behavior and block those IP addresses. Different sites do it for different reasons, some do it for a little extra security because attacks often come routed through a VPN, some do it to block country specific content like Netflix does.

  • source
  • parent
  • [–] 13 points 8 months ago

    /rant on I think CloudFlare is the direct result of the enshitififcation of development work.

    People write an insecure app in Express/Flask/whatever, deploy it to the internet, then bolt on Cloudflare as a WAF and add Datadog because they have no idea what's happening under the hood or limited themselves with their up-front choices.

    This is marketed as progress. /rant off

    But there are valid use cases like you mentioned. And it's the enshitifed sites that fund that free tier.

    There's some irony about the Fediverse going through a centralized service, but I don't know of a better free answer. A cheap answer might be a VPS with Caddy and automatic Lets Encrypt, but it's not turnkey.

  • source
  • [–] 12 points 8 months ago (2 children)

    Easy fix, just ban the act of DDoSsing... duh 🙄

    /j

  • source
  • hideshow 2 child comments
  • [–] 9 points 8 months ago (8 children)

    In addition to the tech reasons mentioned, the click here checkbox is just a fucking infuriating interruption

  • source
  • hideshow 8 child comments
  • [–] 1 point 8 months ago (7 children)

    More infuriating than captcha?

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 8 months ago (6 children)

    No but we need to get rid of all types

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 8 months ago (5 children)

    How are you planning to do it? It's typically used as a defence against bots which are becoming more of problem not less. What you describe is Cloudflare's managed challenge, most of the time it doesn't even need you to click anything because you already clicked somewhere else.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 8 months ago (4 children)

    Ideally a human user wouldn't have to encounter such a system at all

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 8 months ago (3 children)

    In your ideal world it means that you are tracked between websites. It's mostly how it works now.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 8 months ago (2 children)

    Nah, the solution should just be done in the background. Invisible and not a forced interaction

  • source
  • parent
  • hideshow 2 child comments
  • [–] 12 points 8 months ago

    It keeps blocking my VPN, which is highly irritating.

  • source
  • [–] 6 points 8 months ago (4 children)

    I literally can not see most images from lemmy.zip because of the cloudfare craptcha.

  • source
  • hideshow 4 child comments
  • [–] 3 points 8 months ago (3 children)

    Is that what it is? I thought it was just my app being weird, but then I see similar stuff in the browser, too.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 8 months ago (2 children)

    If you use your web browser for lemmy, find a .zip post and try to view the image directly when it resuses to load. You'll immediately get a cloudfare craptcha and then for that session lemmy.zip images will be more willing to work

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 8 months ago

    I use it for a couple websites. I'm a geek and can make things work software wise but I'm absolutely not a programmer, I just don't really grasp a lot of it. Give me some hardware and I can build whatever but I digress. Cloudflare has prevented a bunch of attacks on my sites and the caching function is helping stave off switching to a VPS for now.

    It can be a PITA if you don't have native IPv6 and use Hurricane Electric's IPv6 tunnel broker. A lot of sites that are hooked into cloudflare and some other similar services pop up captcha's every visit or just pain don't function correctly. I'm going to switch to Route64 as an alternative to HE, they only provide a /56 vs a /48 but it's not like I'm going to need that many /64's at this point.

  • source
  • [–] 5 points 8 months ago

    Given that a lot of websites need cloudflare to shield them from getting DOSd by the infinite hord of web scrapers maybe cloudshare should be depicted as a shield blocking a broom from knocking the tower over? Probably both held by the same person...

  • source
  • [–] 5 points 8 months ago (4 children)

    I mainly use Cloudflare for buying domains and DNS settings. Are there better, more resilient alternatives? I am not savvy enough for a hyper custom setup. I think I've seen Porkbun mentioned. I've used name cheap before. I do pay for NextDNS - is that something that could fit into this? I don't think so but maybe I'm underutilizing it.

  • source
  • hideshow 4 child comments
  • [–] 7 points 8 months ago (3 children)

    I'm happy with porkbun. They're pretty well integrated ddclient now, but make sure the version you use has them already

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 8 months ago (2 children)

    I found it when I needed to access a service I had running in a docker container from an external machine. It was magic at the time. I’ve used it to host private GitHub repos with access controls and it works for that too. I haven’t developed a strong opinion perhaps because of its utility.

  • source
  • hideshow 2 child comments
  • [+] 4 points 8 months ago (4 children)
  • [–] 3 points 8 months ago (1 child)

    still need em for DNS (I think)

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (-1 replies)
  • [–] 1 point 8 months ago (1 child)

    Self hosting is why I use CF I like the tunnels for exposing myself to the internet.

  • source
  • parent
  • hideshow 1 child comment
  • [+] 1 point 8 months ago* (last edited 6 months ago) (1 child)
  • [–] 1 point 8 months ago

    Fair question. It's definitely within my ability to "just" swap to something else, I'd prefer something self hosted that's foss. I will do it at some point, cf was a bit of a stop gap for me.

    CF tunnels are similar to reverse proxies I believe. I started using their quick tunnels to expose things to the web and I found it very easy. A few things I wanted to host needed domains so I bought a domain from cf and get access to the permanent tunnels. Their tools are good and I know them from being the company that you call when you get ddos'd. I figured it would keep me safer while I was still figuring things out.

    I feel like in my case I used them because of my ignorance. I know of openvpn i'll look into it.

  • source
  • parent
  • load more comments (-1 replies)
  • [–] [S] 4 points 8 months ago

    I haven't had my shit up for very long, and HOLY SHIT the unique visitors numbers are nuts. I think this is because of federation, but mainly the images being loaded across other instances.

    I looked at deflect and it ain't gonna be cheap, the number will only go up, and I am the sole user of the site. Storing the shit in a media bucket or whatever would fix it, but I'd have to pay for that shit too.

  • source
  • [–] 4 points 8 months ago

    I used to use them, but found that since I'm only hosting for myself, I just don't benefit much (if at all) from their services. The only thing that was actually doing any amount of work was Tunnel (similar to you, I can't forward ports).

    Their service decrypts/snoops on your traffic by nature, and while my traffic is mostly just updating todo lists, taking notes, and backing up photos, I also sync my keepass database and in general just don't want my data snooped on.

    I've since rolled my own Tunnel equivalent with frp on a VPS and have completely dropped CF.

  • source
  • [–] 3 points 8 months ago

    I use Hostinger but it isn’t free, $1.99/mo deal at the moment, normally like 13. It does blocking like cloudflare. AI scraping blocking too

  • source
  • [–] 2 points 8 months ago

    I’d say selfhosting is the shelf that is standing under this.

  • source
  • [–] 1 point 8 months ago

    Admin of Feddit.dk. We try not to use non-EU suppliers and I don't like the idea of depending so fully on something like Cloudflare. I could see us using an EU equivalent but don't really see the need right now.

  • source
  • [–] 1 point 8 months ago*

    for most of the time,indifferent.
    Turnslide is nice,DDOS protection is nice,etc

  • source