it's making the internet centralized and proprietary, i hate it. i do understand how it's a very easy option for website operators struggling against malicious bots though.
post
Dev here, building a public SaaS app. I'm aware of the centralization arguments, but CF seems to be the least worst of all the options in terms of alternatives. CAPTCHAs are awful, and I can't put up my own multi-Tbps DDOS buffer. I also regularly access my own resources from behind multiple VPNs; other than having to click the human button it doesn't consign me to an evening of identifying traffic lights.
Isn't Cloudflare more like the thin horizontal block above that one?
That would imply the web stack wouldn't crash if you remove them.
This image is inaccurate, because it suggests Cloudflare is a small block. The original xkcd makes more sense, because it is a project run by a single person. To represent Cloudflare, it should be a huge block given it's a very large company with a market cap of $69 billion.
It's a free way to get a reverse proxy for a self hosted website and not expose your home IP and avoid attacks, so kind of hard to pass up tbh.
That and AWS US-East
Can you explain this one a bit more?
It’s a great service and it works mostly well. The internet is a little bit better because of them.
It’s also optional and simple to transition away from since they don’t host your environment.
Proprietary centralisation and gatekeeping of the internet, built by a profit first company that actively and deliberately protected nazis and kiwifarms until it became financially harmful for them to continue to do so.
They can fuck right off.
Bane of my existence as obligate VPN user
Can you expand on it? How do websites block vpn? Do they just block all the other countries? Why would you want to visit such websites?
Many people using a VPN have the same IP address, and cloudflare and others can track that behavior and block those IP addresses. Different sites do it for different reasons, some do it for a little extra security because attacks often come routed through a VPN, some do it to block country specific content like Netflix does.
/rant on I think CloudFlare is the direct result of the enshitififcation of development work.
People write an insecure app in Express/Flask/whatever, deploy it to the internet, then bolt on Cloudflare as a WAF and add Datadog because they have no idea what's happening under the hood or limited themselves with their up-front choices.
This is marketed as progress. /rant off
But there are valid use cases like you mentioned. And it's the enshitifed sites that fund that free tier.
There's some irony about the Fediverse going through a centralized service, but I don't know of a better free answer. A cheap answer might be a VPS with Caddy and automatic Lets Encrypt, but it's not turnkey.
Easy fix, just ban the act of DDoSsing... duh 🙄
/j
Stupid solution. Criminals don't care if something is banned.
What they need to do is ban reporting on them. Can't be a problem if there's no record of it ever happening
In addition to the tech reasons mentioned, the click here checkbox is just a fucking infuriating interruption
More infuriating than captcha?
No but we need to get rid of all types
How are you planning to do it? It's typically used as a defence against bots which are becoming more of problem not less. What you describe is Cloudflare's managed challenge, most of the time it doesn't even need you to click anything because you already clicked somewhere else.
Ideally a human user wouldn't have to encounter such a system at all
In your ideal world it means that you are tracked between websites. It's mostly how it works now.
Nah, the solution should just be done in the background. Invisible and not a forced interaction
You don't see a problem with automating a thing against automation? It can be done but in principle the less forced human interaction you get the more privacy invasion it requires.
I literally can not see most images from lemmy.zip because of the cloudfare craptcha.
Is that what it is? I thought it was just my app being weird, but then I see similar stuff in the browser, too.
If you use your web browser for lemmy, find a .zip post and try to view the image directly when it resuses to load. You'll immediately get a cloudfare craptcha and then for that session lemmy.zip images will be more willing to work
Doesn't seem to do anything with Alexandrite, does Photon fare any better?
I use it for a couple websites. I'm a geek and can make things work software wise but I'm absolutely not a programmer, I just don't really grasp a lot of it. Give me some hardware and I can build whatever but I digress. Cloudflare has prevented a bunch of attacks on my sites and the caching function is helping stave off switching to a VPS for now.
It can be a PITA if you don't have native IPv6 and use Hurricane Electric's IPv6 tunnel broker. A lot of sites that are hooked into cloudflare and some other similar services pop up captcha's every visit or just pain don't function correctly. I'm going to switch to Route64 as an alternative to HE, they only provide a /56 vs a /48 but it's not like I'm going to need that many /64's at this point.
Given that a lot of websites need cloudflare to shield them from getting DOSd by the infinite hord of web scrapers maybe cloudshare should be depicted as a shield blocking a broom from knocking the tower over? Probably both held by the same person...
I mainly use Cloudflare for buying domains and DNS settings. Are there better, more resilient alternatives? I am not savvy enough for a hyper custom setup. I think I've seen Porkbun mentioned. I've used name cheap before. I do pay for NextDNS - is that something that could fit into this? I don't think so but maybe I'm underutilizing it.
I'm happy with porkbun. They're pretty well integrated ddclient now, but make sure the version you use has them already
I also love Porkbun, but unfortunately they've recently moved their DNS backend to Cloudflare, soooo...
I found it when I needed to access a service I had running in a docker container from an external machine. It was magic at the time. I’ve used it to host private GitHub repos with access controls and it works for that too. I haven’t developed a strong opinion perhaps because of its utility.
still need em for DNS (I think)
Self hosting is why I use CF I like the tunnels for exposing myself to the internet.
Fair question. It's definitely within my ability to "just" swap to something else, I'd prefer something self hosted that's foss. I will do it at some point, cf was a bit of a stop gap for me.
CF tunnels are similar to reverse proxies I believe. I started using their quick tunnels to expose things to the web and I found it very easy. A few things I wanted to host needed domains so I bought a domain from cf and get access to the permanent tunnels. Their tools are good and I know them from being the company that you call when you get ddos'd. I figured it would keep me safer while I was still figuring things out.
I feel like in my case I used them because of my ignorance. I know of openvpn i'll look into it.
I haven't had my shit up for very long, and HOLY SHIT the unique visitors numbers are nuts.
I think this is because of federation, but mainly the images being loaded across other instances.
I looked at deflect and it ain't gonna be cheap, the number will only go up, and I am the sole user of the site.
Storing the shit in a media bucket or whatever would fix it, but I'd have to pay for that shit too.

I used to use them, but found that since I'm only hosting for myself, I just don't benefit much (if at all) from their services. The only thing that was actually doing any amount of work was Tunnel (similar to you, I can't forward ports).
Their service decrypts/snoops on your traffic by nature, and while my traffic is mostly just updating todo lists, taking notes, and backing up photos, I also sync my keepass database and in general just don't want my data snooped on.
I've since rolled my own Tunnel equivalent with frp on a VPS and have completely dropped CF.
I use Hostinger but it isn’t free, $1.99/mo deal at the moment, normally like 13. It does blocking like cloudflare. AI scraping blocking too
I kinda picture it more like this: https://media.gettyimages.com/id/200550933-001/photo/young-woman-lying-in-bed-hiding-under-pillow-smiling-portrait.jpg?s=612x612&w=gi&k=20&c=0JIF0lpDQnUeSor0EpWfNOzXpw94KFBj1KaPZaslltE=
Admin of Feddit.dk. We try not to use non-EU suppliers and I don't like the idea of depending so fully on something like Cloudflare. I could see us using an EU equivalent but don't really see the need right now.
for most of the time,indifferent.
Turnslide is nice,DDOS protection is nice,etc
all 71 comments