[HN Gopher] Ask HN: Cloudflare WAF Alternatives?
___________________________________________________________________
Ask HN: Cloudflare WAF Alternatives?
I don't know if we're ready to pull the trigger yet, but curious if
other folks are looking at alternatives. The WAF is great, but
recent events have made it obvious that having a single point of
failure entirely defeats the purpose of DNS being a
distributed/decentralized service. Is anyone doing anything
creative here? We like the features that the WAF provides - but not
at the expense of global outages. If you have a 3 9s availability
SLA, you've just blown 90% of your allotted downtime because of
Cloudflare's WAF.
Author : rco8786
Score : 12 points
Date : 2025-12-05 20:10 UTC (2 hours ago)
| yearolinuxdsktp wrote:
| AWS Route53, built-in DDoS basic protections, plus AWS WAF (can
| be expensive depending on your budget).
| mappu wrote:
| The ability of a WAF to respond to an 0day incident is rapid
| rollout, 100% of endpoints, which is a SPOF no matter whether
| it's done via a big company or by a distributed system.
| grim_io wrote:
| Being down because half the internet is down is an easier sell
| than being down because you fucked it up yourself.
___________________________________________________________________
(page generated 2025-12-05 23:01 UTC)