• Mwa@thelemmy.club
    link
    fedilink
    English
    arrow-up
    121
    ·
    edit-2
    6 days ago

    Ohh that’s why everything is slow and this is my sanity check.

    But its scary how if Cloudflare went down most popular websites will go down with it

  • Vanilla_PuddinFudge@infosec.pub
    link
    fedilink
    English
    arrow-up
    88
    arrow-down
    3
    ·
    6 days ago

    I remember the day I went why are we all selfhosting and still relying on a site like Cloudflare?.

    I’m glad I agreed with me on it.

    • talentedkiwi@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      16
      ·
      6 days ago

      I’ve migrated about half of my services off of cloudflare DNS proxy. Guess which half still worked this afternoon. (Self hosting pangolin with CrowdSec as replacement). I wasn’t even using the cloudflare tunnel. Just their proxy for some bot mitigation.

      • SidewaysHighways@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        6 days ago

        been really enjoying pangolin so far! i got scared and ended up not installing crowdsec.

        am i missing out? how hard would that be to add after the fact?

        • talentedkiwi@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          6 days ago

          Can’t speak to how difficult it would be to do after the fact. My guess is just adding in the lines in the docker compose. As for CrowdSec, it seems to run in the background and I haven’t looked at it much. I’ve triggered it a few times and locked myself out. So I’ve added my home IP to the whitelist (it’s running on a VPS). It also locked out my uptime Kuma so I whitelisted that too.

    • GreenKnight23@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      6 days ago

      still hard. most projects still CDN online instead of packaging into a single application.

      it’s one of the most infuriating things about self-hosting. so I made my own self-hosted CDN and have rewrite rules that replace most public cdb domains and reroute them to my own local.

      it would be great if I could just have something in the middle that would download once and cache locally on request, but it’s effort that would be taken from my time afk.

    • Lka1988@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 days ago

      I used Cloudflare tunneling for a while, then started to have similar thoughts. I’m off Cloudflare now.

    • tal@lemmy.today
      link
      fedilink
      English
      arrow-up
      32
      ·
      edit-2
      6 days ago

      I think that at least some instances use Cloudflare for various things, so depending upon what and how much stuff at Cloudflare is broken, some lemmy instances may be impacted.

  • ayyy@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    27
    ·
    6 days ago

    Dafuq is a character.ai and why is it in the same list as google and cloudflare? Like yea my local grocery store had some issues should that be on the list too?

    • Revan343@lemmy.ca
      link
      fedilink
      English
      arrow-up
      6
      ·
      5 days ago

      Had to include something AI because of the craze, probably picked at random

      • The Octonaut@mander.xyz
        link
        fedilink
        English
        arrow-up
        8
        ·
        edit-2
        6 days ago

        Your code can compile while you’re in a retro, retrospectively looking back at the action items raised in a previous retro but not assigned any sprint time in the current sprint so you just raised a “what went wrong” about it not being planned and now you have more non-sprint work to do because every problem should be presented with a solution and if you could have that for the next retro they’ll review this retro’s action items and see if you have a proposal for fixing retro action items

        • wise_pancake@lemmy.ca
          link
          fedilink
          English
          arrow-up
          10
          ·
          6 days ago

          This is why I call scrum masters scrumlords.

          Thankfully my boss is hands off so I took a walk and then worked on an internal tooling side project that really only I will appreciate.

            • wise_pancake@lemmy.ca
              link
              fedilink
              English
              arrow-up
              3
              ·
              edit-2
              6 days ago

              Quitting my last job for this one might be the best thing I’ve done since I tricked my wife into marrying down.

              My mental and physical health has improved a ton.

    • melroy@kbin.melroy.org
      link
      fedilink
      arrow-up
      12
      ·
      6 days ago

      We just should not use cloudflare. Why is everybody still trying to use cloudflare.

      It drives me nuts. The default answer on all network problems: why don’t you just use cloudflare? No! No no.

      • pinball_wizard@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        6 days ago

        We just should not use cloudflare. Why is everybody still trying to use cloudflare.

        Counterpoint: I find networking challenging, and I’m not particularly accountable for the natural consequences of not knowing how stuff works.

        This could end fine for everyone? Maybe an AI will understand it for me. (This is sarcasm. I agree with you.)

    • Glitchvid@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      ·
      6 days ago

      It sucks because up until the “sales team” rugpull, they’re the cheapest (and closest to reality) for bandwidth cost, virtually all the other CDN providers charge astronomical prices and their margins are hundreds to thousands of percentage.

      • tal@lemmy.today
        link
        fedilink
        English
        arrow-up
        5
        ·
        6 days ago

        If the costs are mostly variable in how much they serve up, and uptime is sufficiently important, maybe have two CDNs and use the other one as a fallback when things start going tits-up?

        • Glitchvid@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          6 days ago

          Cloudflare tries to enforce pretty strong vendor lock in by requiring you use their nameservers.

          Also subdelegate domains are an “enterprise” feature, so no luck there.

          Basically the CDN market sucks, not a shocker Netflix, Google, Valve, and many others operate their own.

          • tal@lemmy.today
            link
            fedilink
            English
            arrow-up
            2
            ·
            edit-2
            6 days ago

            Hmm.

            I’m not familiar with the constraint.

            I assume that the way that this works is that I host content at www.foo.com and they have their nameserver resolve www.foo.com to different IPs based on the geolocation of the browsing user’s IP.

            Is it possible to convert www.foo.com to a CNAME that can be redirected away from their nameservers? Like, I make www.foo.com be a CNAME directed at www.foo-cloudflare-cdn.com. They own www.foo-cloudflare-cdn.com, they serve A or AAA queries there on their nameservers. But if I want fallback, I update the CNAME to point at www.foo-backup-cdn.com, which is served by a different CDN.

            Are there technical barriers to that, do you know?

            • Glitchvid@lemmy.world
              link
              fedilink
              English
              arrow-up
              3
              ·
              6 days ago

              The way CDNs and virtual hosts work in general is to read the host field in the HTTP header, otherwise unless you dedicate an IP for each domain / “web site” there would be no way to know what to serve.

              The issue is if you put the CNAME of foo www.foo-cloudflare-cdn.com. then it will just resolve to whatever the A/AAAA record is for that, and send the host of www.foo.com – which they will only service if that domain is hosted with their nameservers (they run automated checks to make sure you’re actually doing so). So there isn’t really an easy way to just give cloudflare some subdomain, unless you pay them $$,$$$+ for the privilege.

              Valve actually does that, ironically enough, for the steam community web assets they use Fastly, Akamai, and CloudFront, all on subdomains of course 🙃.

              • tal@lemmy.today
                link
                fedilink
                English
                arrow-up
                2
                ·
                6 days ago

                The way CDNs and virtual hosts work in general is to read the host field in the HTTP header, otherwise unless you dedicate an IP for each domain / “web site” there would be no way to know what to serve.

                But the point of CDNs is to direct connections to a geographically-near IP, yes?

                The domain name that any CDN webserver in different regions will get in the HTTP request headers is going to be the same, CNAME or no.

                The issue is if you put the CNAME of foo www.foo-cloudflare-cdn.com. then it will just resolve to whatever the A/AAAA record is for that, and send the host of www.foo.com – which they will only service if that domain is hosted with their nameservers (they run automated checks to make sure you’re actually doing so).

                Ah, okay, I could see someone having automated checks that actively prevent it.

                • Glitchvid@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  ·
                  edit-2
                  5 days ago

                  But the point of CDNs is to direct connections to a geographically-near IP, yes?

                  That’s generally right enough, the goal of a CDN is to deliver content from a server close to the consumer as possible (ideally on their ISP network using cache servers to avoid going out over the “wider internet”.) – however CDN networks typically also use Anycast IP addresses, which means that all of the CDN servers across their network use the same pool of IP addresses, and BGP / the routing table dictate what actual physical server you get routed to. This is typically the ideal closest server, however sometimes you want certain IP pools in certain regions for legal (China), or technical reasons, so the IP address returned by a given A/AAAA lookup for a CDN isn’t a given. There’s also ECN and other optimization CDNs can do on the lookup side but that’s outside of the scope here.

                  The domain name that any CDN webserver in different regions will get in the HTTP request headers is going to be the same, CNAME or no.

                  Yeah, so the CNAME just says “whatever A/AAAA address that resolves to” and the HTTP client will send whatever HOST it thinks its connecting to, meaning you can’t “mask” the actual domain you’re using by using a CNAME record.

                  Technically if you have a totally static IP serving a single site, it’s possible to ignore the HOST field and always serve that site, since logically, any request is only meant for that given site (this is basically the default site on something like Apache).

                  My main point is that there’s really no getting around that CloudFlare requires you to be locked in to their platform even if you just wanna serve R2 files from a subdomain, and I personally find that a bit spooky, migrating nameservers can have very long propagation times leaving your site unreachable if they decide they don’t want you as a customer anymore, or as a shakedown.

  • mesa@piefed.social
    link
    fedilink
    English
    arrow-up
    34
    ·
    6 days ago

    At work just about all major services are super slow or down. It’s like cloud strike again.

    Oh well I still get paid. But it’s crazy how much centralization affects the world wide web.

  • DarkCloud@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    arrow-down
    2
    ·
    6 days ago

    The answer always seems to be: Cloudflare is fucking up again. This isn’t the first time.

  • HugeNerd@lemmy.ca
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    6 days ago

    Uh huh, just before a major democracy attacked an evil, evil country. Must be coincidence.

    • jimmy@feddit.orgOP
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      6 days ago

      Thanks I have updated the Google link to this instead of downdector.

    • sp3ctr4l@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      3
      ·
      6 days ago

      Holy shit, goddamn near everything is down, nearly everywhere.

      Fucking Tracer Tong ending from Deus Ex, hope somebody has a save file they can reload from soon, otherwise… yeah…