Comment

Comment on Cloudflare is bad. Youre right.

Not entirely. CF can protect you from DDOS of up to a few millions of calls per minute. Your home router would melt with that traffic. They also act as a firewall if you enable the proxy dns feature. They do a sanity check before forwarding the call. Also a home router cannot do this. And there’s more.

source

Sort:hotnew top

lemmyvore@feddit.nl ⁨1⁩ ⁨week⁩ ago
Both your ISP and CF will drop you like a hot potato if you’re ever under that kind of attack.

CF has other features that are nice like, like WAF, bot detection, geo blocking, caching etc. But it’s only a taste.

All their real services are paid and the whole reason they offer a free tier is to upsell you to their paid services.

source
- Auli@twit.social ⁨6⁩ ⁨days⁩ ago
  @lemmyvore @f2sfljLhdtTZ You can geoock without CloudFlare.
  source
- whydoesnothingwork@mastodon.social ⁨6⁩ ⁨days⁩ ago
  @lemmyvore @f2sfljLhdtTZ cloud flare doesn't drop you in that situation, I've been using them for years and seen them quietly and contently mitigate attacks for my clients
  source
Auli@twit.social ⁨6⁩ ⁨days⁩ ago
@f2sfljLhdtTZ @Darkassassin07 Eveyone so worried about DDoS. They are not going to DDoS a resedential Ip address. Sure if youbpiss someone off they well they're going to do it even without selfhosting anything.
source
- DaPorkchop_@lemmy.ml ⁨6⁩ ⁨days⁩ ago
  I can assure you that before I set up Cloudflare, I was getting hit by SYN floods filling up the entire bandwidth of my home DSL2 connection multiple times a week.
  
  source
Darkassassin07@lemmy.ca ⁨1⁩ ⁨week⁩ ago
Sure, cloudflare provides other security benefits; but that’s not what OP was talking about. They just wanted/liked the plug+play aspect, which doesn’t need cloudflare.

Those ‘benefits’ are also really not necessary for the vast majority of self hosters. What are you hosting, from your home, that garners that kind of attention?

The only things I host from home are private services for myself or a very limited group; which, as far as ‘attacks’ goes, just gets the occasional script kiddy looking for exposed endpoints. Nothing that needs mitigation.

source