• TehPers@beehaw.org
      link
      fedilink
      English
      arrow-up
      44
      ·
      8 hours ago

      Cloudflare’s dominance is a huge problem exactly for this reason. Having a single point of failure is a huge risk, and it’s surprising that governments don’t view this as being a matter of national security.

      As a side note, and not to “well ackshully”, but Cloudflare isn’t a backbone provider. But your point still stands lol.

  • confusedpuppy@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    11
    ·
    6 hours ago

    Even though I don’t host anything important, I’m still glad I found alternative ways to hosting my own stuff without the use of any of Cloudflare services.

    I’ve noticed over time that the self-hosted communities have been suggesting Cloudflare Tunnels less and less since Trump and his gang took over America. Maybe this latest outage will push more people to not recommend Cloudflare again in the future.

    I still remember when I first got into self-hosting and being mocked pretty hard for questioning the use of such a large centralized service like Cloudflare. I’m glad I persisted and kept learning in my own direction but that still was very demotivating at the time.

      • confusedpuppy@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        1
        ·
        5 hours ago

        True.

        My self-hosting strategy is wildly alternative and not one I speak much about publicly. I’m the only person connecting to my own domain so as long as I continue to practice shutting the fuck up, I can get away with using multiple layers of obscurity rather than fiddling with third party solutions.

        I check my logs daily and the only activity I ever see is my own. Since I am not hosting anything critical or sensitive, I have the opportunity to experiment this way without much risk to myself.

        The way I’m set up, I am not concerned with DDOS attacks because it would fail to get past the Dynamic DNS. If I were hosting a social media platform or something more public, then I would need to take stronger measures to protect myself and that data.

    • coaxil@lemmy.zip
      link
      fedilink
      arrow-up
      3
      ·
      6 hours ago

      The only thing I use CloudFlare for is encrypted DNS stuffs, other suggestions for this?

      • confusedpuppy@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        4
        ·
        6 hours ago

        Currently I’m using DeSec.io for my Dynamic DNS and Caddy as my reverse proxy to automatically handle encryption certificates. It takes a little extra effort setting up a DeSec.io module with Caddy but since I got it working, it’s been essentially zero maintenance.

  • kbal@fedia.io
    link
    fedilink
    arrow-up
    14
    ·
    7 hours ago

    Pretty quiet on lemmy without .world and .ca and whatever else. I’m glad to see beehaw still up.

    • themachinestops@lemmy.dbzer0.comOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      5 hours ago

      It is not just Europe the entire world should stop using American companies for everything. Amazon, Microsoft, and cloudflare. A big portion of the internet is US dependent. Russia and China seem to realize how big of an issue this is, Europe still too dependent.

  • yxp@lemmy.radio
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    6 hours ago

    I’m willing to move away from cloudflare if only I can expose servers without a global IP and needing to open port on the router side. Do anybody know how to do this?

    Or maybe I should move to somewhere I can setup port-forwarding?

    • qjkxbmwvz@startrek.website
      link
      fedilink
      arrow-up
      6
      ·
      7 hours ago

      VPS+VPN, this is what I do.

      VPS has public IP and runs WireGuard “server”* and a reverse proxy (and fail2ban…). Reverse proxy points to my home computer over the WireGuard link. No open ports on my home router.

      For private facing/LAN-only services I just don’t have an entry in the VPS reverse proxy. DNS on the router points everything to my local server, so if at home I access everything directly. To access internal services remotely requires VPN (i.e., WireGuard to the VPS).

      Works well; I have a tiny free tier VPS but even so, no complaints.

      *Yes I know there are no wg clients or servers, only peers, but it plays a server-likr role.

      • yxp@lemmy.radio
        link
        fedilink
        English
        arrow-up
        3
        ·
        7 hours ago

        I’ve been thinking about this setup but it depends on external server after all…

        • qjkxbmwvz@startrek.website
          link
          fedilink
          arrow-up
          2
          ·
          6 hours ago

          Yes, but you can run multiple VPS, from different providers, simultaneously.

          What I like is that while it does depend on an external provider, it doesn’t depend on a specific external provider. Any VPS with a public IPv4 would work.

      • fristislurper@feddit.nl
        link
        fedilink
        arrow-up
        3
        ·
        6 hours ago

        Tailscale is definitely the most frictionless solution. But you will then rely on tailscale instead of cloudflare, so not ideal. You can also host Headscale so you do not have to rely on them either.

        • CodingCarpenter@lemmy.ml
          link
          fedilink
          arrow-up
          1
          ·
          1 hour ago

          I’ve never heard of headscale. Can you hook this up to a domain like you can with cloudflare tunnels? That was my main reason for using it. Being able to just hand my family member a domain to point to and see audiobooks

      • yxp@lemmy.radio
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 hours ago

        Tailscale is fine, problem is I have to keep my phone connected to the tail network, which drains the battery. I do have a tailscale subnet router running under my network so I can fix things remotely.

  • Virku@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    15
    ·
    8 hours ago

    The status page is overloaded and just gives http 504 errors. Kind of ironic that a cdn provider gets that type of error.

  • Blaze (he/him) @lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    8
    ·
    8 hours ago

    Had to get that account back as piefed.zip, piefed.social and lemmy.zip cannot be accessed.

    Cool to see other people still able to access the Threadiverse