222
submitted 1 day ago* (last edited 1 day ago) by Cantaloupe@fedioasis.cc to c/asklemmy@lemmy.world

Both Lemmy.world and my server rely upon Cloudflare for SSL, DDOS protection, CDN services, etc. I use it to provide me with a Cloudflare tunnel to get around not being able to forward ports.

Outages have put this dependance to question, and the same with recent news about the US government obtaining data through subpoenas. It’s a free service that takes care of many of the difficulties when it comes to hosting your service online, but everyone knows that free is not free.

What do you all think about Cloudflare?

top 50 comments
sorted by: hot top new old
[-] Oberyn@lemmy.world 3 points 2 hours ago

Bane of my existence as obligate VPN user

[-] SorteKanin@feddit.dk 1 points 2 hours ago

Admin of Feddit.dk. We try not to use non-EU suppliers and I don't like the idea of depending so fully on something like Cloudflare. I could see us using an EU equivalent but don't really see the need right now.

[-] Bazoogle@lemmy.world 9 points 5 hours ago

This image is inaccurate, because it suggests Cloudflare is a small block. The original xkcd makes more sense, because it is a project run by a single person. To represent Cloudflare, it should be a huge block given it's a very large company with a market cap of $69 billion.

[-] Cantaloupe@fedioasis.cc 2 points 3 hours ago

Fair enough, one other guy said it should be the thin block above the one pointed to. Makes sense, and it can still be yanked from under you.

[-] 7fb2adfb45bafcc01c80@lemmy.world 6 points 5 hours ago

/rant on I think CloudFlare is the direct result of the enshitififcation of development work.

People write an insecure app in Express/Flask/whatever, deploy it to the internet, then bolt on Cloudflare as a WAF and add Datadog because they have no idea what's happening under the hood or limited themselves with their up-front choices.

This is marketed as progress. /rant off

But there are valid use cases like you mentioned. And it's the enshitifed sites that fund that free tier.

There's some irony about the Fediverse going through a centralized service, but I don't know of a better free answer. A cheap answer might be a VPS with Caddy and automatic Lets Encrypt, but it's not turnkey.

I’d say selfhosting is the shelf that is standing under this.

[-] irelephant@lemmy.dbzer0.com 12 points 10 hours ago

The modern Internet would be way worse without it, but it still sucks how centralized it is.

[-] MuttMutt@lemmy.world 3 points 8 hours ago

I use it for a couple websites. I'm a geek and can make things work software wise but I'm absolutely not a programmer, I just don't really grasp a lot of it. Give me some hardware and I can build whatever but I digress. Cloudflare has prevented a bunch of attacks on my sites and the caching function is helping stave off switching to a VPS for now.

It can be a PITA if you don't have native IPv6 and use Hurricane Electric's IPv6 tunnel broker. A lot of sites that are hooked into cloudflare and some other similar services pop up captcha's every visit or just pain don't function correctly. I'm going to switch to Route64 as an alternative to HE, they only provide a /56 vs a /48 but it's not like I'm going to need that many /64's at this point.

[-] Jack@lemmy.ca 13 points 12 hours ago
[-] greenbit@lemmy.zip 5 points 10 hours ago

In addition to the tech reasons mentioned, the click here checkbox is just a fucking infuriating interruption

[-] cows_are_underrated@feddit.org 10 points 12 hours ago

Feddit.org uses Anubis

[-] RickyRigatoni@piefed.zip 4 points 10 hours ago

I literally can not see most images from lemmy.zip because of the cloudfare craptcha.

[-] zikzak025@lemmy.world 3 points 9 hours ago

Is that what it is? I thought it was just my app being weird, but then I see similar stuff in the browser, too.

[-] RickyRigatoni@piefed.zip 1 points 8 hours ago

If you use your web browser for lemmy, find a .zip post and try to view the image directly when it resuses to load. You'll immediately get a cloudfare craptcha and then for that session lemmy.zip images will be more willing to work

[-] zikzak025@lemmy.world 2 points 7 hours ago

Doesn't seem to do anything with Alexandrite, does Photon fare any better?

[-] RickyRigatoni@piefed.zip 1 points 6 hours ago

I don't think there are any workarounds for the apps. Cloudfare uses sessions that also take what client you're using into account. I more of said that comment so anyone can see the proof for themselves.

[-] chicken@lemmy.dbzer0.com 14 points 14 hours ago* (last edited 14 hours ago)

It's a free way to get a reverse proxy for a self hosted website and not expose your home IP and avoid attacks, so kind of hard to pass up tbh.

[-] Zwuzelmaus@feddit.org 29 points 17 hours ago

Cloudflare is one of the secret ruling parties of the internet.

I don't understand why so many Americans like to use it, even the ones who tend to think liberal and go for self hosting.

[-] msage@programming.dev 9 points 14 hours ago

What are the alternatives?

[-] towerful@programming.dev 8 points 13 hours ago

And a VPS and any number of tunneling systems for the remote reverse proxy.
Rathole is my goto. But SSH forwarding, wireguard... There's plenty, even ones that will entirely manage the reverse proxy on the VPS.

[-] Raptorox@sh.itjust.works 4 points 14 hours ago

Letsencrypt for SSL, fail2ban for ddos protection, literally just a disk for cdn.

[-] msage@programming.dev 3 points 6 hours ago

Does fail2ban actually help?

In a strong enough DDOS, you need someone before you to stop the traffic, at which point you either have a good provider, or have to submit to someone bigger than you.

[-] arudesalad@piefed.ca 5 points 10 hours ago

This is probably why so many people use cloudflare. Similarly to discord, their serivices can be found on several different platforms but they are the only ones who offer all of them for free.

load more comments (1 replies)
[-] Artaca@lemdro.id 5 points 13 hours ago

I mainly use Cloudflare for buying domains and DNS settings. Are there better, more resilient alternatives? I am not savvy enough for a hyper custom setup. I think I've seen Porkbun mentioned. I've used name cheap before. I do pay for NextDNS - is that something that could fit into this? I don't think so but maybe I'm underutilizing it.

[-] lemming741@lemmy.world 6 points 12 hours ago

I'm happy with porkbun. They're pretty well integrated ddclient now, but make sure the version you use has them already

[-] QuandaleDingle@lemmy.world 1 points 3 hours ago

PORKBUN FTW! 🐷

[-] Scrollone@feddit.it 2 points 4 hours ago

I also love Porkbun, but unfortunately they've recently moved their DNS backend to Cloudflare, soooo...

[-] lemming741@lemmy.world 1 points 21 minutes ago

goddammit why can't I have nice things?

[-] hexagonwin@lemmy.today 81 points 23 hours ago

it's making the internet centralized and proprietary, i hate it. i do understand how it's a very easy option for website operators struggling against malicious bots though.

[-] dparticiple@sh.itjust.works 42 points 21 hours ago

Dev here, building a public SaaS app. I'm aware of the centralization arguments, but CF seems to be the least worst of all the options in terms of alternatives. CAPTCHAs are awful, and I can't put up my own multi-Tbps DDOS buffer. I also regularly access my own resources from behind multiple VPNs; other than having to click the human button it doesn't consign me to an evening of identifying traffic lights.

[-] MonkderVierte@lemmy.zip 4 points 13 hours ago* (last edited 13 hours ago)

What, LLM scrapers still don't solve captchas, despite being better at them than humans? How come?

[-] OwOarchist@pawb.social 27 points 20 hours ago

The ones that require traffic lights and shit never seem to work properly for me. They always make me do an endless repetition of them, going through dozens and dozens before it finally, maybe lets me see the website I was trying to get to.

Maybe I'm just not human enough?

[-] LwL@lemmy.world 5 points 12 hours ago

I've found that clicking them slower (until the new image is fully faded in) can help for the ones that have images disappearing after clicking, and not actually clicking every square containing part of the traffic light (if it's only a tiny edge) helps with the ones that are one image of a thing. I guess being fast or noticing details isn't human enough. Having to wait is insanely annoying though.

[-] hansolo@lemmy.today 7 points 17 hours ago

It might be your browser or extensions. I get that more on Librewolf than Mullvad, for example.

load more comments (2 replies)
[-] arcine@jlai.lu 5 points 15 hours ago
[-] IAmNorRealTakeYourMeds@lemmy.world 3 points 13 hours ago

still need em for DNS (I think)

[-] arcine@jlai.lu 2 points 12 hours ago

There are alternate providers, like Cloud9 or Mullvad !

[-] IAmNorRealTakeYourMeds@lemmy.world 3 points 11 hours ago

all my computer science and IT knowledge end when it comes to networks.

[-] arcine@jlai.lu 3 points 9 hours ago

Honestly if you want to try it on Firefox, they have a few options built-in for alternative DNS !

And I feel your pain, my CS bachelor's had like 0 courses on Networking, fortunately my current Engineering degree courses have great stuff available, so I'm finally catching up !

[-] naught101@lemmy.world 33 points 22 hours ago

Isn't Cloudflare more like the thin horizontal block above that one?

[-] MonkderVierte@lemmy.zip 4 points 13 hours ago* (last edited 13 hours ago)

That would imply the web stack wouldn't crash if you remove them.

[-] guynamedzero@piefed.zeromedia.vip 1 points 2 hours ago

It’s like jenga, janga? Idk how to spell it. Try pulling that one out without it crashing. Sure it could stand if it were never there in the first place, but it is there, so therefore it’s gonna be a pain to remove it safely

[-] gwl@lemmy.blahaj.zone 6 points 17 hours ago

It fully is yes

[-] joyjoy@lemmy.zip 16 points 20 hours ago
[-] VitoRobles@lemmy.today 2 points 13 hours ago

Can you explain this one a bit more?

[-] phcorcoran@piefed.social 6 points 11 hours ago

us-east-1 was (one of?) the first region for AWS and a lot of their systems don't respond super well if that region has issues. AWS is also the backbone of a lot of the internet

load more comments
view more: next ›
this post was submitted on 16 Feb 2026
222 points (95.5% liked)

Ask Lemmy

37843 readers
2001 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 2 years ago
MODERATORS