What are Reddit's favorite CDN Apps?
Cloudflare
Microsoft Azure
Cloudinary
KeyCDN
Google Hosted Libraries
Section
Exoscale
ImageKit.io
Uploadcare
Sirv
Statically
jsDelivr
cdnjs
StackPath
ArvanCloud
CDN77.com
Gumlet
ImageEngine
CloudSigma
Top Reddit reviews mentioning CDN Apps:
Are you not using Cloudflare? If not, do that. It's free and will solve your problem. They serve everything for you and cache it.
Edit: I would also recommend changing your origin IP once you get on cloudflare and keeping it a secret. Only share it with Cloudflare and don't make an obvious DNS record for it like origin.saudiarabiaisisis.com. Your site seems a likely target for a DDOS. If you do it right you are pretty much bulletproof, but 99% of people ignore this advice and do it wrong so their site goes down indefinitely and they throw their hands up (see: private torrent trackers)
Edit2: He appears to be setting up Cloudflare!
It would really be inconvenient if Jones was dropped by his website provider Cloudflare.
https://www.cloudflare.com/abuse/
You could file a complaint against "violent threats and harassment" on Cloudflare IP servers like, say...
MERLIN.NS.CLOUDFLARE.COM
and
ROBIN.NS.CLOUDFLARE.COM
It would be a shame if his site suddenly became inactive and he had no other outlet...
>Take for example Titanfall right. I heard mixed reviews so saying good some bad not the point EA said nope not our country because our infrastructure was to bad. Which is total horse crap because we get Battlefield Mp just fine.
No, it's not horse crap. Titanfall relies on Microsoft Azure servers. If you look here, you'll see that Microsoft does not have any data centers in South Africa. So naturally they shouldn't sell it there.
No, you don't need to go that far. Submit a complaint at https://www.cloudflare.com/abuse/form -- and since they have communicated with you via email asking for detailed personal information, I would begin by filing the complaint as phishing.
God damn, they're such fuck ups they can't even setup SSL right :/
SSL isn't hard.
There's even a god damn web server that'll handle it for you.
CloudFlare is a free speech won't ban anything bastion.
Being Nazis is one level of stupid. This is an extra level of stupid.
It means MangaDex was getting too much traffic that Cloudflare finally went "Yeah, you're not a small site anymore and you'll need to start paying for us". Hopefully, going off Cloudflare's plans, they only need to use the $20/month tier?
It'd be a "cease and desist" letter, hopefully.
You may be able to go after their hosting company and report copyright infringement. It is unlikely that they are actually hosting the site out of Bangladesh. This site may be able to determine who hosts them. (If it says Cloudflare, don't worry, Cloudflare accepts abuse reports here - have them forward to both the host and the owner.) Usually the hosting company will have some form of copyright abuse form - in the US, this is also called a DMCA complaint or takedown notice.
You may also be able to report them to PayPal or whatever payment processor they use, although this is a little more difficult.
Actually, one should also consider using a CDN and possibly not pre-processing the files that could be hosted from a CDN. Even if you don't want to use a CDN, you can still get some of the benefit with etagging. The reason for this is that most browsers and ISPs will have the larger frameworks like jquery cached already (ex: https://developers.google.com/speed/libraries/devguide, or http://cdnjs.com/). By pre-processing the files and creating 1 monolithic JS file, you are most likely creating a unique file that is guaranteed not to be cached for any unique visitor. This means that every unique visitor has to download the entire monolithic file. If you're using jquery, backbone, underscore, jqueryui etc... on a single site, things can add up quickly. Almost everyone has at least some of these cached from one of the larger CDNs these days.
Versioning plays a role here as well. With a single js file, you'll need to reprocess the entire file every time anything is updated. This means that all users will have to download the entire js file again whenever any change is made. By utilizing etagging and keeping the files separate, the client will only download the files that have changed since the last visit (same goes for their isp if it caches, and it's isp and so on). This is very important on mobile where the network operators do a ton to reduce the traffic as much as possible.
As a side note, another common fallacy is that you should always compress your images for mobile. It turns out that this isn't always the case as many times, the mobile isp already does compression and caching. By doing this yourself, you could actually make the file that's sent to the client larger or of poorer quality than what would normally be sent.
Because huge sites can't be run from a basement in Romania? A CDN is just one part of the infrastructure necessary to support a large web presence.
> Cloudflare has been ISO 27701 certified as a PII Processor and PII Controller since 2021 and the certificate is available upon request.
and even more importantly
> Cloudflare maintains PCI DSS Level 1 compliance
https://www.cloudflare.com/privacy-and-compliance/certifications/
Technically, yes, but the traffic is completely encrypted, so congrats you have something that is entirely useless. The traffic is only useful to you at one end, and the thing you're connecting to on the other.
If you are affected by this you can fix this by using an alternative IP address for imgur. Imgur uses a service called cloudflare to host their websites. cloudflare have a lot of IPs for their service. (see here if you are interested: https://www.cloudflare.com/ips )
anyway, by adding these two lines to your hosts file you can redirect your traffic to a working IP:
198.41.128.1 i.imgur.com
198.41.128.1 imgur.com
Mac/Linux users hosts file is at /etc/hosts
Windows users your hosts file is at C:\Windows\System32\drivers\etc\hosts
(You will need to open notepad as an administrator to be able to save to this file) right click notepad -> open as administrator then use the open dialog to find the file and edit it.
Please remember to remove this once it is back up as you will not be taking advantage of cloudflares ability to load balance across the world by forcing imgur to just these IPs
The DNS for those websites is also routed through Cloudflare which is a global content delivery network. They are pretty good at putting pressure on web providers who abuse their platform. I’ve reported a few legit Pishing and Malware sites in the past and they shut them down within hours.
I’m gonna submit a few Abuse forms on their site in the hope of finding other angles. - https://www.cloudflare.com/abuse/form
Don’t use Google DNS unless you’re comfortable with Google tracking all of your internet activity. Cloudflare’s DNS (1.1.1.1, 1.0.0.1) is a better option for privacy and performance. An audit by a 3rd party in 2020 supports their claims about privacy (full report here).
https://www.cloudflare.com/learning/ssl/what-is-an-ssl-certificate/
i think this can explain it better than most people on here (including me obv), but TLDR its basically a certificate that a website has that contains a bunch of info that tells whatever is on the receiving end of it that its legit
You're not allowed to use Cloudflare's "unlimited" bandwidth for serving video. See section 2.8 of their terms
> Use of the Services for serving video or a disproportionate percentage of pictures, audio files, or other non-HTML content is prohibited, unless purchased separately as part of a Paid Service or expressly allowed under our Supplemental Terms for a specific Service.
The pricing of Cloudflare Stream, their video-serving service, is hard to compare, but it's probably not cheaper than BunnyCDN.
I run a few high traffic sites that get DDOS's regularly.
I've since ended up with the following winning combination.
Set up a NEW server with a new IP address. Then set up Nginx so it's serving your website through an IPv6 address not IPv4. Most Botnets aren't IPv6 capable. Cloudflare doesn't care and it'll proxy it for you. Then firewall off that IPv6 address so only cloudflare can access it using the list at https://www.cloudflare.com/ips
Then set up a Amazon S3 bucket for all your static assets (css, js, png's, jpg's, etc). Set up cloudflare so s3bucket-xtnodes.s3.amazon.com or whatever is CNAME aliased to static.xtnodes.com and then set a cloudflare rule so everything is heavily cached and it'll rarely, if ever, hit your S3 bucket. Then edit the HTML to point to your static asset host for all of that stuff.
For the dynamic PHP, consider making a quick Laravel PHP site and use an in-memory cache like Redis for all the dynamic stuff rather than a backend MySQL instance. MySQL uses disk too much, but Redis will help a lot.
If you skip the redis stuff, but want an infrastructure that can handle the DDOS, try nearlyfreespeech.net
If you want to roll your own DDOS protected VPS, check out this thread for some good hosts
http://www.lowendtalk.com/discussion/comment/1232674/#Comment_1232674
I'm about to go to the park with my kids for a few hours, but if you want help setting it all up just get a VPS and update it and I can help you out in a few hours. I also have a ton of Amazon credits to burn that I'm happy to throw at the cause and some unused VPS's for redundant backends.
You should be able to handle this with a VPS with 1 or 2 gigs of memory as long as you have that front-end and back-end infrastructure in place and the DDOS asshats don't know your real IP address.
https://www.cloudflare.com/learning/dns/what-is-dns/
Προς το παρόν μια απλή ρύθμιση DNS στις network settings του λειτουργικού αρκεί, δεν χρειάζεται καν να μπλέξουμε με τις ρυθμίσεις του router.
https://iguru.gr/2018/11/08/subs4free-down/
Καλά για την απόφαση μπλοκαρίσματος αυτή καθ'αυτή δεν έχω να πω πολλά, μόνο πως τόσο η ΕΔΠΠΙ όσο και οι επίσημοι διανομείς και κάτοχοι πνευματικών δικαιωμάτων είναι εκτός τόπου και χρόνου.
One thing to note about it:
It looks like CloudFlare may not be selling your userdata (or explicitly naming you as the one using it), but it does look like they are giving it away for free in the form of aggregate data.
Fun fact $750,180,000 of that comes from maxing out Machine Learning 1 billion predictions and 1 hour per prediction, the second part is prorated so it won't cost nearly that much, it's still not cheap but you're basically buying 114,155 compute years (a month!!!) if my math checks out.
Source: http://azure.microsoft.com/en-us/documentation/articles/machine-learning-faq/
The rest of the cost comes from buying a small data center's worth of servers of high specs.
You can't set up a self-hosted solution that works like Clouldflare, at least not without spending a boatload of money.
Cloudflare has 151 locations spread around the world and incredibly complex infrastructure in place.
Cloudflare offers a free tier that includes world class distributed DNS combined with free CDN service. It's unbeatable.
Answer: Just use Cloudflare.
It prevents website requests from hitting your host directly. If you have someone who helps you with your site they will know.
When you get a lot of traffic from reddit, it tends to take websites down - just fyi, so your site isn't down with the attention here.
It says it is made by NoAdBlock. I don't know, but they might be associated with Cloudflare. But if it's not Cloudflare, then maybe we could report it for bad behavior, etc?
EDIT: Cloudflare has an abuse form that allows reporting malware. I'm pretty sure that from the user's perspective, this qualifies as malware since it's intentionally causing breakage.
If the server really won't come back, we shoot it off the starboard bow.
....what I mean is, it's a very troubled piece of software from CloudFlare for connection acceleration and response differential compression. But either due to our scale or we just have monitoring detailed enough to notice, it has severe issues. Enough that we disabled it for now.
Also, happy cake day!
If you were a financial institution, you'd know that Cloudflare has a bunch of relevant certificates. Since I assume you are not a financial institution, I don't know what regulations you have to follow, but chances are that Cloudflare can handle your data.
However no one knows since it's your data and regulations might say you need to get this confirmed for all vendors you use, which would include Cloudflare.
But technically you are right: Cloudflare receives the plain text data from the backend server (transport might be HTTPS, but it's repackaged). See also here. Whether this is an actual problem or not depends on your regulator and the certificates Cloudflare has.
What is usually the bigger problem is that PIs can be access by wrong people (e.g. I log in and see your PI).
Ne pričajte gluposti, to je stranica od cloudflarea, koja kešira stranice jutarnjeg, a usput i štiti od ddos napada i slično. Možebitno se spajaš sa neke ip adrese koja je označena kao problematična u njihovom sustavu.
https://www.cloudflare.com/plans/
There you go. They will just quit the free service the moment they decide you need to. If you get enough traffic I give a good bet that the sales department starts mailing you.
You should just put cloudflare in front of your website. It’s free for personal sites, or $20/mo for pro plan. Then you never have to worry about this on accident (reddit hug) or on purpose (ddos).
https://www.cloudflare.com/plans/
Note: I do not work for cloudflare, I just use them at work.
Truly random RNG via hardware is a thing in classical computing. Probably the most famous method is by watching lava lamps.
I am a big fan of Cloudflare. I would recommend using an Argo Tunnel to expose the service to Cloudflare. Set up basic rules to block non-US traffic, block bots, and then configure Access, which is a zero trust identity aware proxy. All of these are free from Cloudflare.
Cloudinary has a pretty neat remote image fetching feature - You could probably use some JS magic to change the pixel density & image size dynamically also.
CloudFlare has denial-of-service attack protection. Normally that screen looks like this (I got that straight from the CloudFlare website as you can tell by the URL).
I've seen some websites use it. Voat was going down so much, I guess that's their solution.
Using Plex violates their TOS section 2.8. Here is the link https://www.cloudflare.com/terms/
They don't limit bandwidth but I heard some people get temporary banned for serving binary content (Plex). The ban lift automatically after some period of time as far I can recall. They really don't give much attention if your traffic is not that much.
I don't think it's right to encourage people use cloudflare in their Plex setup. As it clearly violate their TOS.
If it's static-ish content you could use CloudFlare. We do it for large sites and, for the most part, it works well and saves on bandwidth.
It sits in front of your website and caches your content (also adds some security). So most requests never hit web host. Google Analytics and similar will all still work as they operate client side. Your web server logs, however, won't show most of the traffic unless you put some special things in place.
It's also mostly free.
Good luck!
> Sure, but on mobile data, the bottleneck is bandwidth. Most client side rendering frameworks are quite heavy.
React is 50kb minified and gzipped. jQuery is half that. And you load those only the first time you visit a site. Sometimes, not even that, thanks to free distribution networks.
If you have a single photo on your page, your client-side GUI library will be dwarfed by it. And we live in an age where many fancy web pages are using friggin' videos as backgrounds for their home page hero banners.
> A lot of apps have very bad data-needed-to-render / rendered-page ratios
90% of everything is crap. What some apps and frameworks do isn't representative of an entire approach to application development.
> I'm not saying CSR does not have a place, and I think mostly server side rendering with a thin layer of client side for interactivity is great way to go.
Sometimes it is, sometimes it isn't. And having a "thin client side" doesn't preclude client-side rendering. Client-side rendering doesn't automatically mean a "fat client side".
Blocked by only two ISPs; how pointless.
Change your DNS and I bet it'll works again. The way the government forces ISPs to block sites is insanely easy to bypass and legal.
Speak to HotWheels ( email : .) as he OWNS 8chan , report CP to CloudFlare. VPNs will not protect pedos.
If any laws are being broke, get them v&. I hate pedos , but I don't really understand what it has to do with KIA as we have no power over 8chan or ownership.
Also, If you are actively seeking CP on any website. I suggest you get some help.
This just means their SSL certificate is out of date and they need to update it. Nothing that they already have can be leaked, only whatever you may input/bring up while they have no certificate if say there was somebody malignant redirecting or listening to that data, which is unlikely. Just don't visit the site while they didn't update their cert.
https://www.cloudflare.com/learning/ssl/what-is-an-ssl-certificate/
Firefox also supports some additional security measures that Chrome doesn't fully or natively implement. It's also got a great mobile experience for people who like to read.
This is basically the idea behind Google's Hosted Libraries. If you use them, there's a very good change it's already in the browser's cache. I'm kind of surprised that Chrome doesn't ship with them built-in, frankly.
This worked for me in pfSense without throwing any errors:
- Firewall -> Aliases -> IP -> Import
- Give the Alias a name. I.e CloudflareIPs
- Copy and paste the Cloudflare's IPv4 list and IPv6 list (if you use IPv6) and hit "Save".
- Create your firewall rule using the alias "CloudflareIPs" or whatever you named it to.
Done.
Det er nettsiden som sender sertifikatet, og nettleseren din som validerer sertifikatet. Alle moderne nettlesere gjør dette.
Dersom klienten er en app (og ikke en nettleser), er det opp til klienten å validere sertifikatet. Jeg vet at det for ett par år siden var veldig fokus på at en del apper ikke gjorde dette rett, men vet ikke noe om hvordan status på det som trusselvektor er i dag. Både iOS og Android har i dag APIer som gjør dette automatisk (og dette er standard APIene), slik at utvikleren ikke trenger å tenke på det.
Du kan lese mer her: https://www.cloudflare.com/learning/ssl/what-happens-in-a-tls-handshake/
I don't know what you are on about. Discord uses HTTPS, that means any communication between your client and the server is encrypted, which makes every JSON payload also encrypted, so your message cannot be read.
Just run a Wireshark and send some messages. All you are going to see is an SSL stream between you and CloudFare see here: https://www.cloudflare.com/case-studies/discord/
> until the first people go to jail because of something they wrote on Discord. Censorship, surveillance
This is just straight up bullshit, the reason why your so called "surveillance and censorship" is possible is because Discord allows bots to exist. Bots behave just like a normal account, except they can be automated for example to respond in a way to certain messages, log messages, user activity and so on. There's a ToS for bot usage, which states that logging user data without notifying the user or allowing them to opt out is strictly illegal. What you can do against it is either don't join or message in that particular discord server. Also the bot must be invited to the server, meaning only the server owners can do it.
Hey /u/Fatherlorris I noticed that whenever you post a new comic, your site loads like s... well, poorly (I'm from Europe).
May I suggest using Cloudflare? There's a free plan that should be enough.
Let's Encrypt is great. Cloudflare is terrible.
Here are some reasons not to use Cloudflare: * It's not really free. It's like a drug dealer "First ones free". * Shared SSL certificates * Forced to use Comodo for SSL * Can't use Let's Encrypt for SSL * Can't use your own SSL * Decrypts SSL traffic, breaking End-To-End Encryption. * Cooperates with tyrannical governments * Provides services to terrorists, child pornographers, and so on * Has no "vetting" process for new customers * Does not protect your website from hacking * Doesn't provide any value to 99% of websites * Cloudflare's CEO is an ego-maniac who believes he controls the entire internet.
> Keyless SSL requires that Cloudflare decrypt, inspect and re-encrypt traffic for transmission back to a customer’s origin.
Source: https://www.cloudflare.com/ssl/keyless-ssl/
By doing that, Cloudflare is violating the trust between users and server operators and making the SSL certificate itself worthless. A website cannot be considered "Secure" if the traffic is decrypted by a man in the middle.
So to answer your question, ditch Cloudflare and use Let's Encrypt.
Ak beží na normálnej infraštruktúre (nie divné minihostingy v Číne, Turkmenistane, Rusku), tak je fajn nahlásiť zneužitie administrátorom (napr. na Cloudflare).
Quote from this article.
"Some bots can get past the text CAPTCHAs on their own. Researchers have demonstrated ways to write a program that beats the image recognition CAPTCHAs as well. In addition, attackers can use click farms to beat the tests"
Basically, there are ways around it. Read the article for more info
That's an interesting article, thanks for sharing! As far as I am aware, even by blocking the connections using iptables (or any software firewall), you're still getting the traffic which might hit hard your CPU, and it can bottleneck your bandwidth as well.
​
As far as I know, the most efficient and definitive way to mitigate a DDOS attack is by "blackholing" the traffic, but that requires a network infrastructure with a lot of bandwidth, that's why cloudflare is so popular when protecting from DDOS attacks - that traffic will never hit your infrastructure.
There's a bit more context on this article, if you're interested: https://www.cloudflare.com/learning/ddos/glossary/ddos-blackhole-routing/
Ну схоже що це не біржа заблокувала нас, а Performance & security by Cloudflare.
Може ддосили з нашої территорії або ще щось.
The site uses CloudFare services to protect itself from attacks such as DDOS and uses a GoDaddy domain (the url).
If you want to stop people from accessing it then everyone should file a complaint so that it could be brought down.
https://supportcenter.godaddy.com/abusereport and here: https://www.cloudflare.com/abuse/form
The answer to all your questions and all the security issues is by dropping in CloudFlare in front of your domain. Gives you DNS that propagates within seconds, masks your networks public IP behind their servers and supports dynamic IP addresses. Since you're on a home network the speed is definitely not on a server provider level, but most of your assets will be cached by CloudFlare and served directly from their high bandwidth servers. You also get a very powerful DDoS protection and security overall. On top of that you get a SSL certificate for your domain. And the best part of it is that all of this is completely free.
To enable CloudFlare on your domain, simply change nameservers of your domain to CloudFlares nameservers and then wait for the change to propagate - after that your site will be enabled and you can handle the DNS directly from CloudFlare, just make sure your A record goes through CloudFlare (the cloud logo) and not bypasses it.
Backblaze is part of the bandwidth alliance: https://www.cloudflare.com/bandwidth-alliance/
> Our partners have agreed to pass on these cost savings to our joint customers by waiving or reducing data transfer charges.
In theory, you could store in B2 and proxy through R2 for savings, depending on the egress rate they charge into R2. Though it's all theoretical until the product is live.
You mean the PTR Records shown?
What is PTR?
https://www.cloudflare.com/learning/dns/dns-records/dns-ptr-record/
"DNS PTR records are used in reverse DNS lookups. When a user attempts to reach a domain name in their browser, a DNS lookup occurs, matching the domain name to the IP address. A reverse DNS lookup is the opposite of this process: it is a query that starts with the IP address and looks up the domain name."
An IP of: 45.80.90.125 will have a PTR of 125.90.80.45.in-addr.arpa (the reverse of the previous IP with a in-addr.arpa appended at the end)
Nothing is compromised on your system.. PTR, DNSSec, RRSIG and others are all part and parcel of the current DNS protocol.. It is behaving exactly as it should be..
So, I like what you're putting out overall, but I question the level of intention you're applying to "them"
I don't doubt anything about what you've written with regards to the nature and sophistication of the hardware and software attached to our markets... but I do question as to whether those forces are being intentionally directed toward retail order flow, or abused against retail order flow.
I suspect what's really underlying what we see is the equivalent of DNS amplified DDOS attacks (link your compsci quant this):
https://www.cloudflare.com/learning/ddos/dns-amplification-ddos-attack/
To break it down: My theory is that the shorts are intentionally putting out signals (through the way they're performing wash trades, down to timings, volume, and size of peaks/dips) to simulate otherwise normal market behaviors and cause OTHER organizations to help with their shorting.
To put it into a quick analogy, this isn't someone's D-Wave system run amuck on its own and shorting, like "The Sorcerer's Apprentice" in Fantasia, but rather the shorts intentionally playing "harmonious selling music" in contrast to retail's buying to cause such systems monitoring the market to also join in on keeping down buy pressure / not recognize the profit opportunity.
I can't think of any immediate ways to discriminate between these two potential underlying causes though, so perhaps the distinction of intention is unimportant.
Do not send emails, send a formal DMCA Take Down notice. I have success in the past submitting a DMCA notice here:
https://www.cloudflare.com/abuse/form
There are numerous examples of DMCA notices on Internet. Adapt yours according. Is not necessary to register your copyright, but i noticed everyone work faster when you register and submit your copyright registration documentation.
You can submit the same notice to the Cloudflare, the host and directly to the website.
An effective way is to report them to Google or to Cloudflare (only if they are actually using CF, check if they're SSL certificate is from CF).
Cloudflare usually responds to abuse reports within a few hours. Google takes some more time apparently...
​
Taking this a step further.. If your router allows for custom firewall rules, you can grab the cloudflare IP set that will talk to your server and only port forward if from one of them.
We don't really know what goes on inside DDG, but at least they've promised to not track your requests, and that's one of their differentiators. If they are keeping their promise, there's no record of your search.
Now, suppose they began to use a CDN. Cloudflare, for example, states they do log requests. So then, there would be no difference between the big guys and DDG.
My concern is that creating your own rules is impractical and expensive. Blocking by IP Address? Fools errand in the world on botnets. Creating my own string matching for SQL injection? There are so many ways for these to be written. Maybe I'm missing something but I prefer how CloudFlare does this.
Microsoft just open sourced .Net and has made open source software available on Azure. No doubt it's good for Microsoft but it's still a good step in the right direction.
Whenver I see someone say something so explicit as "don't want to rely on a 3rd party like CloudFlare" all I can think is it is your loss.
Cloudflare is terrific, and their "access" product would probably exactly what you are looking for. Only it will work faster and better than anything you could implement yourself.
https://www.cloudflare.com/en-au/learning/bots/how-captchas-work/
A user has to identify the images that contain certain objects, such as animals, trees, or street signs. If their response matches the responses from most other users who have submitted the same test, the answer is considered "correct" and the user passes the test.
Yes, every time you create a new TLS connection it does a new handshake and generates new ciphers used only for that session. Ditto for SSH and basically every other encrypted protocol still in use. This is the basic foundation of modern secure infrastructure. Even at Chili's.
https://www.cloudflare.com/learning/ssl/what-happens-in-a-tls-handshake/
I use Cloudflare for all my sites.
It's completely free to get an SSL certificate. Instead of installing a certificate, you just point your nameservers at them (easy to do in your hosting account) and turn SSL on in the settings.
You can also set up a free custom rule, which forwards all traffic from http to https.
Another great (free) benefit of cloudflare, is you can cache your site and have it delivered over their CDN. This makes your web pages load quicker and uses less data for your users.
In CloudFlare you can enable "I'm Under Attack Mode" which will verify that visitors to your site are not bots if you are under Layer 7 attack. Also, I recommend firewalling off all traffic to your machine except the CloudFlare IPs if your server is under direct attack. You can find a list @ https://www.cloudflare.com/ips
>jQuery was just getting way too big!
Use google CDN and browser cache https://developers.google.com/speed/libraries/devguide
>When I stepped back and took a look at apps I was creating, I realized that I only utilized a small subset of the jQuery functionality...
So what? It's a library, not the Tablets of Law, use whatever you need and leave the rest.
>Messy code! The convenience of JQuery can easily lead to poorly written code and bad practices such as very long and obscure selectors.
It's your choice to write messy code.
> Project Multatuli's website was DDoS'D after publishing an article critical of the police's handling of a statutory rape case in Luwu Timur
I think I read somewhere that Cloudflare has a subscription plan for NGO or something, probably want to use that.
Edit: Yes, Project Galileo.
DDoS against servers is the best and easiest way to take down a site, probably DNS resolvable hosts.
It not only can affect people trying to get to the servers (Domain Name won't resolve) but can cause internal problems if they're (the company) is dependent upon external resources such as Ping, Google or other authentication methods.
Even though the company may be up, access would be blocked.
https://www.cloudflare.com/learning/ddos/famous-ddos-attacks/
The other options would be supply-chain attacks, shell-shock and bouncy-castle type vulnerabilities, not to mention internal compromise of users / systems which we see with ransomeware.
But externally, bot-based accounts performing a DDoS is one of the hardest to defend against.
The Fastly issue was a configuration problem due to a valid config being pushed, and encountering a bug. 1-minute to detect, hours to remediate.
No, that's not how random number generators work. They will always give the same results from the same seed, as long as you don't change the RNG or its implementation.
That's why some people go through elaborate lengths to get a truly random seed for their RNG: https://www.cloudflare.com/learning/ssl/lava-lamp-encryption/
This pops up on the main page of lodgame.com. Still large parts of the website are down despite this future tech.
This page (http://lodgame.com/) is currently offline. However, because the site uses Cloudflare's Always Online™ technology you can continue to surf a snapshot of the site. We will keep checking in the background and, as soon as the site comes back, you will automatically be served the live version. Always Online™ is powered by Cloudflare (https://www.cloudflare.com/)
We use Cloudflare to help cache the site and handle heavy traffic loads. Cloudflare occasionally decides that a certain IP is a spammer or involved in a DDOS and will give them a captcha -- this should be quite rare. Sorry for the trouble!
Edit: In case you're still reading this, if you use webpack (or the like), some will come with cache busting built in. Just thought I'd add that little tidbit
Amazon and Azure both have free trials:
http://aws.amazon.com/pricing/
http://azure.microsoft.com/en-us/pricing/free-trial/?rnd=1
Create an account for yourself and start playing around with building and configuring machines and using their panels. That should help you get started.
I believe Microsoft offers $200 or so to try Azure for 1 or 2 months; it's a platform I actually enjoy much more than the other cloud platforms I've tried. It's catching up to (and at times has exceeded) AWS very quickly, and Google Cloud is just a half assed Google product, imo. Azure or AWS are the routes to take, and IMO Azure wins out. It's glaring issue right now, is if you don't use a VM and use their web services, and say, want to use a MySQL database they use ClearDB as their provider and they are horrible. Outside of that, it's super smooth and I highly recommend it to anyone looking to go cloud based.
You can spin up Linux VMs and recently they added Docker support, so Microsoft is platform agnostic on Azure; but I really love their VM image library and set up. It's very nice. Not to sound like an advertisement.
This is incorrect. Politico is using Cloudflare as a CDN for their site. While it is hosted on Cloudflare it is still the Politico website. Learn what a CDN is
I’m confused by your question. You stated that you pointed you domain dns servers to Cloudflare, correct? In that case you domain provider is no longer involved in DNS management it should be pointing only to the cloudflare dns servers. To enabled DNSSEC when it’s hosted on Cloudflare you login to the Cloudflare dashboard to enabled this feature and add/update dns entries.
https://www.cloudflare.com/dns/dnssec/universal-dnssec/
https://support.cloudflare.com/hc/en-us/articles/360006660072
I think you’ll need to provide more info as to which dns registrar you’re using. If they don’t support it have you considered transferring the domain to another domain register that does?
- Website using HTTPS are more trustworthy for users.
- HTTPS authenticates websites.
>HTTPS myth-conceptions
>
>Myth: I don’t handle sensitive information on my website so I don’t need HTTPS
>
>Reality: Modern web browsers now limit functionality for sites that are not secure. Important features that improve the quality of the website now require HTTPS. Geolocation, push notifications and the service workers needed to run progressive web applications (PWAs) all require heightened security.
These were gathered from cloudflare.com > Why Use HTTPS
How are you resolving DNS queries to the outside world? Sure, you can use unbound as a local DNS proxy, but you still need upstream DNS servers to query. You can use unbound to query the DNS root servers directly - and that's fine - but the DNS roots run unencrypted on port 53, so if your ISP wanted to snoop that traffic they can do so.
If you aren't querying the DNS roots and are using your ISP's DNS servers, obviously they can log all DNS traffic if they want to, so definitely avoid using your ISP's DNS.
Unbound supports connecting to encrypted DNS using DNS-over-TLS (DoT). So pick a DoT provider you trust - I use Quad9 myself, but other options are available - and configure unbound to use that for upstream queries via DoT on 853 instead.
Bear in mind that even if you connect to a website via SSL/TLS, the domain part is still sent in cleartext, although the rest of the url is hidden. There's not much you can do about that, because the web server at the other end needs to know which certificate to use, especially if the server is serving multiple domains (and most will be).
with the way you've been responding it doesn't look so much like you're learning, but hoping for someone to feed you exactly what you need without developing any kind of understanding about what it is you're doing.
if you can't even be arsed to go review some basic intro resources on the very basic building blocks of the web you have no business running a website.
cloudflare itself has a very good course. start there.
if there's anything you don't understand after that, do some basic research first and then if you still can't figure it out, ask. outline what it is you're trying to do (the goal), what you've tried so far, what parts you think you don't understand, and what you've found to try to answer it. demonstrate some effort in trying to solve the problem instead of expecting people to feed you all the answers and you'll get a more receptive audience.
The old flag waver bot used this website to host its images:
I'm honestly not particularly knowledgeable on the benefits this would have over Imgur, though I do know that Imgur's terms of service state:
>...don't use Imgur to host image libraries you link to from elsewhere, content for your website, advertising, avatars, or anything else that turns us into your content delivery network.
so there might be some problems with that.
Here is a Browser Checker and firefox instructions to enable DoH.
It's not about anyone living at your house using the site, it's about potentially anyone within your ISP's IP block (some of which are even national wide for mobile ISPs), and IPs are often banned via subnet instead of individually
While you can pretty easily spoof the sender address of a UDP packet, getting any sort of reply (or establishing a connection with TCP) across the publicly routed internet is pretty hard/requires a lot of trust (BGP hijacking). I don't doubt you got something demonstrated, but I doubt that it was what you think it was, or is applicable to the public internet.
It was a pretty convoluted plan to get to the end result, but I figure he didn't care about getting caught for the initial obvious hacking he did because it was a distraction so authorities wouldn't notice him sneaking in the code he needed for whatever Archlight in.
There's a kernel of truth in the idea of screwing up domain names can screw up the Internet, and that there are people specifically in charge of making sure they don't get tampered with. Articles about the DNSSEC Root Signing Ceremony here and here if you're interested. The silly part is the show portraying it all being in one facility, but TV often simplifies real-world concepts so it can be a plot point that fits into a 45 minute episode.
CF simply works as a CDN/MITM between the visitor and the website. This doesn't need much research, it is well known. The traffic goes from the visitor to CF. Then they send it to your server. Even all IPs you will get are from CF (with an extra header with the original IP.) If you read the SSL section it will talk about 2 SSL certificates: from CF to the visitor and from your server to CF. I really think it's clear for anyone to see that CF can see all traffic from all of those companies.
Now while I sound so negative, I use CF myself too for a small site (and some others.) They are pretty good, protect well against DDOS but even just spam-bots, good CDN with proper caching and they even have free "universal" SSL. This is all for $0. Obviously in a way, you pay by sacrificing the privacy of your visitors and business. Not so relevant for my small sites though, but more so for the ones in OP.
edit: I am not saying CF "needs" this against DDOS, I am just saying this is really how they work.
Great information, but I think you need to feed the hamsters that are powering your host.
You might want to consider utilizing a content delivery network (CDN) if utilizing a better host is not possible; this one is free and supports WordPress sites with relative ease.
I wouldn't trust Azure to host my VPSes, especially considering the fact that they don't know how to build a network without major outages occuring nearly every day.
Larger providers like Digital Ocean and Linode have significantly fewer issues every month despite having many more customers. Microsoft also charges a massive premium over other, more reliable providers for their inferior service.
first you are going off a blog post from over a year ago to base pricing on. I wouldn't say he's wrong, it's just changed.
That being said, it has changed. Pricing for the entry level website is free - http://azure.microsoft.com/en-us/pricing/details/app-service/
http://azure.microsoft.com/en-us/features/migration-accelerator/
"Move physical, VMware, AWS and Hyper-V virtual machines to Azure"
"Migration cutovers to Azure in as little as minutes"
"Fast, pain-free migrations"
This is what I'm trying, multiple A records for the same hostname, each with a different IPv4 address. It's called DNS Load Balancing
Cloudflare stands in the middle between public traffic and your server, filtering out various kinds of bad traffic including DDoS attacks. Your domain points to their server, which forwards valid traffic on to yours. You can then further limit requests coming into your server to Cloudflare's IP ranges, so that only traffic going through them is considered valid.
You cannot implement the kind of traffic inspection and filtering Cloudflare does. They're very good at it, and they're getting better with every attack they see.
This was almost certainly a DNS reflection attack — or attempted attack.
https://www.cloudflare.com/learning/ddos/dns-amplification-ddos-attack/
As in, someone actually trying to attack Cloudflare. We didn’t originate the traffic.
I also would recommend a 3D image-based rotation presentation as opposed to 3D scanning. 3D scanning results will take longer to capture, longer to process, and longer for your prospects to download than an equivalent 3D-looking results made with photos only.
Take a look at this: https://sirv.com/demos/360-spin-3d-model/. This would provide a 360-view of your products with the resolution and accuracy of digital photos without creating full 3D models.
To put it simply: You pay a Registrar (GoDaddy, etc.) for your domain name, and they put it in a database that feeds the DNS servers.
It is much, much more complicated than that in reality. https://www.cloudflare.com/learning/dns/what-is-dns/
Looks like Craig has fired up his bitcoin supercomputer botnet
>Error 1020 Ray ID: 4d4b566889df5db2 • 2019-05-10 10:47:52 UTC
>
>Access denied
>
>What happened?
>
>This website is using a security service to protect itself from online attacks.
>
>Cloudflare Ray ID: 4d4b566889df5db2 • Your IP: 1.156.204.61 • Performance & security by Cloudflare
Likely just someone using a custom tool or using curl to test stuff.
You can set whatever UA you want in a curl like so:
curl https://www.cloudflare.com -H "User-Agent: You are really courageous."
that will then show up in your logs, and Cloudflare logs, with what you see there. You may want to work with the Cloudflare support team to see if they can look into other internal instances of this UA popping up which might lead them to finding some type of malicious service doing generic scanning, and they may be willing to add this to a black list if it looks shady enough.
I also believe you can create a user agent rule (depending on your plan) and block that specific user agent if it seems to be doing weird stuff based on your logs.
> This article claims that Dropbox runs as a front-end to AWS s3
No, it claims that it used to.
> And people who think they can compete with S3 on anything including cost, edge-latency, ingest, capacity or durability are simply kidding themselves. Dropbox can do it because they own the use case and business requirements including how their app works.
Didn't you just contradict yourself?
> Amazon has been running exabyte-class erasure-coded multi-region replicated distributed storage on a hostile internet for years and during that time they've been repeatedly and reliably dropping price, adding new classes and adding new features left and right.
It's definitely true that Amazon is the market leader and expert in this space. No disagreement there.
> And this is just laughable "If you're distributing data all over the world rather than putting it in a $600 million data center in rural Kansas, you can get a lot more performance out of it." -- they are seriously claiming that sharding bits of your files across thousands of consumer-class storage devices sitting all over the world at the end of internet links of various quality will end up being "more performant".
Yes, we are claiming that. Isn't getting closer to the edge what Cloudflare just launched? https://www.cloudflare.com/products/cloudflare-workers/. In fact, what's the point of CDN at all?
Distributing across a wide variety of nodes with high variance allows us to return data as soon as the fastest nodes return. Enormous parallelism gives us unbeatable throughput. If you're concerned about consumer-class storage devices, do you think S3 is all SSDs? They're spinning metal just like everything else.
Why so negative?
Yes. They offer two services - one, you (the hosted company) share your private key with them; two, you provide separately authenticated access to your private key via a key server. In both cases they can still see all of your traffic.
Om dessa medier hade haft någon tekniskt kunnig person till hands skulle de haft CloudFlare framför sina sidor. Istället har de en halvdan lösning från ett svenskt företag som inte kan någonting om nätverksattacker...
CF har mitigerat de tre största DDoS-attackerna i historien, varav den senaste var på 400 Gbps!
You could use a free CloudFlare (https://www.cloudflare.com) account to power the SSL using the flexible method that way they will get valid SSL experience and it won't cost you anything. Plus the DNS and caching services they offer are pretty good all for free.
Why not use Cloudflare on top of wherever you're hosted? The free plan should be more than sufficient.
Cloudflare is amazing at caching static content, be it web pages, images or files. Only the first request from a particular zone will be served by your server, the rest from then on will be served by Cloudflare. You can set how long each type of / specific resources should be cached.
Even if your host goes down for a little while (very unlikely since you're only serving cache-able, static resources) Cloudflare can continue serving your site as if nothing happened.