Cloudflare Outage reddit / selfhosted ---------------------------------------------------------------------- lilolalu · 2023-11-03 15:41 https://www.zdnet.com/home-and-office/networking/cloudflare-is- struggling-with-another-outage-heres-what-to-know/ https://www.cloudflarestatus.com/ Sorry, but given the frequency that people recommend cloudflare zero trust in the selfhosted subreddit as the safest, most resilient and borderline perfect solution for your selfhosted services, this is kind of funny :) ---------------------------------------------------------------------- No_Dragonfruit_5882 · 2023-11-03 16:05 Well, if you know what you are doing. Portforwarding is just as safe. You dont have the ddos protection, but nobody apart from you can see your traffic. Altought, you gotta give Credit where Credit is due. Cf has good uptime Overall. If you compare it with the attacks that hit them daily, you could say they have amazing uptimes. Ofcourse something like this should not happen, but yeah ---------------------------------------------------------------------- suddenlypenguins · 2023-11-03 16:11 For the day to day selfhoster's usage, there was little to no impact. I'm not sure what CF did to you exactly to warrant such a nothingburger post. ---------------------------------------------------------------------- mrpink57 · 2023-11-03 16:11 Everyone could just as easily setup a Tailscale Funnel. ---------------------------------------------------------------------- lilolalu · 2023-11-03 16:18 There were massive international repercussions of this outage buddy. ---------------------------------------------------------------------- lilolalu · 2023-11-03 16:37 Or just don't use free commercial proprietary "solutions" at all, if you know what you are doing. ---------------------------------------------------------------------- lilolalu · 2023-11-03 16:39 Nobody will DDoS your absolutely irrelevant homeservers anyways. ---------------------------------------------------------------------- No_Dragonfruit_5882 · 2023-11-03 16:50 Iam hosting for 4 Companys and about 50 home Users. 1100 Euro electricity each month. Getting about 4 DDOS each month to at least one of my customer cms's and or their gameservers. Just because this is r/selhosting, it does not mean there are no company sysadmins in here that host their shit in their own serverroom. Any suggestion how i can make my customers, my gameservers, my Servers and my 3 WAN uplinks irrelevant aswell? Since you seem to have a bit of experience in this field ---------------------------------------------------------------------- Accomplished-Lack721 · 2023-11-03 16:56 That's fine as a substitute for running a VPN off your own equipment, but it doesn't help with opening up a service to the Internet in general reasonably safely. ---------------------------------------------------------------------- suddenlypenguins · 2023-11-03 16:56 International repercussions? Like, do I talk to my embassy about not being able to access Home Assistant outside my home? ---------------------------------------------------------------------- Webbanditten · 2023-11-03 17:00 Weird electricity bill flex, but ok. ---------------------------------------------------------------------- thekrautboy · 2023-11-03 17:05 *Dont you dare say anything critical of Cloudfart in this subreddit!* ---------------------------------------------------------------------- lilolalu · 2023-11-03 17:06 If that's what you usually do when you can't access your Homeassistant, go ahead. I don't use cloudflare or tailscale crap so I wouldn't know. ---------------------------------------------------------------------- flaming_m0e · 2023-11-03 17:13 https://tailscale.com/kb/1223/funnel/ Funnel is NOT the normal Tailscale product. ---------------------------------------------------------------------- No_Dragonfruit_5882 · 2023-11-03 17:16 Thats not a flex lol. Thats after i reduced my Costs in every possible way. Why would someone flex with electricity cost that he has to pay himself? A flex would be if id say i got 3 Serverracks and pay nothing for electricity. And my Server's tdp is the best was to give everyone a overview how much power those Servers have. Its simply not a flex, its because i dont have as much time as 95% of the people here that would write their whole inventory with parts for their Servers. Nobody fucking cares what Hardware i run. So its either => Write my electricity cost which is basically all you really need to know Or Really flexing with the Hardware parts i have in each Server. ---------------------------------------------------------------------- Accomplished-Lack721 · 2023-11-03 17:17 My mistake! I thought you had a typo for "tunnel." ---------------------------------------------------------------------- persiusone · 2023-11-03 17:37 Interesting. I use cloudflare and did not notice any issues affecting my production services. I logged into the portal and found that some of the APIs were not working properly, so changes were not easily made.. Otherwise, solid as a rock on my end. So, yes. I'd still recommend them. Literally every solution has issues from time to time, but it's not affecting me in the way you portray, so I'm happy. Overall they have an outstanding reputation for uptime and stability. Not like others. You do you, but I'm vested in a company who will do what it takes to keep uptime because that's their business, and they have some major players as pressure which helps me not having to worry about resolution. ---------------------------------------------------------------------- lilolalu · 2023-11-03 17:43 I have absolutely no interest in Cloudflare or Tailscale and I am sure they do an excellent job. I find it hilarious that these services are discussed in every second post on /r/selfhosting while they are literally the antithesis of self hosting. Mainly because the people using them don't understand that they don't need them. ---------------------------------------------------------------------- sneakpeekbot · 2023-11-03 17:43 Here's a sneak peek of /r/SelfHosting using the [top posts](https://np.reddit.com/r/SelfHosting/top/?sort=top&t=year) of the year! \#1: [Top shelf](https://i.redd.it/ot8grwcqte1a1.jpg) | [3 comments](h ttps://np.reddit.com/r/SelfHosting/comments/z1a52v/top_shelf/) \#2: [Chat GPT gave me a suggestion on possibly running GPT-J on an RTX2070. Has anyone tried this? I’m sure it’s slow, but does it work?] (https://np.reddit.com/r/SelfHosting/comments/10kzq4n/chat_gpt_gave_me _a_suggestion_on_possibly_running/) \#3: [CRM or ERP? Looking for better solution to customer data handling than Excel](https://np.reddit.com/r/SelfHosting/comments/13oh gti/crm_or_erp_looking_for_better_solution_to/) ---- ^^I'm ^^a ^^bot, ^^beep ^^boop ^^| ^^Downvote ^^to ^^remove ^^| ^^[Contact](https://www.reddit.com/message/compose/?to=sneakpeekbot) ^^| ^^[Info](https://np.reddit.com/r/sneakpeekbot/) ^^| ^^[Opt-out](ht tps://np.reddit.com/r/sneakpeekbot/comments/o8wk1r/blacklist_ix/) ^^| ^^[GitHub](https://github.com/ghnr/sneakpeekbot) ---------------------------------------------------------------------- persiusone · 2023-11-03 17:52 >the people using them don't understand that they don't need them I think you have no idea why people actually use these services. They don't just tunnel and obscure origin traffic, it's a but more complicated. Sure, some folks probably don't "need" them, but probably find it easier and safer than other alternatives. Exposing your IP while hosting a game server, for example, opens yourself to other issues. Issues which cloudflare can resolve for you. Some use them for the performance factors alone. Having your content at the edge provides for a better user experience and less demand on your resources. Also, it allows for uptime when your mother unplugs your server because you stayed up past your bed time - so it may benefit you. I don't run game servers and I don't have a bed time, and still use cloudflare for a lot of stuff. The fact is, a narrow minded approach to solving problems is your issue and I would suggest that your recommendations are less than thoughtful if you have not considered solutions like this. ---------------------------------------------------------------------- clintkev251 · 2023-11-03 17:54 I didn't know that we were gatekeeping what counts as Selfhosted now. There's lots of valid reasons for people to use Cloudflare, and one of them is "because I want to", so who really cares what people do with their own setups? ---------------------------------------------------------------------- diet_fat_bacon · 2023-11-03 18:21 Hey, if you do not have your own transit service and directed connected to a IX, you are not doing selfhosted correctly.... ---------------------------------------------------------------------- applesoff · 2023-11-03 18:30 What do you use? ---------------------------------------------------------------------- nyrosis · 2023-11-03 18:48 I feel old. Exposing ips to the internet is how the internet was meant to work. It was more fun when everything had a public ip. Still could if peeps would use ipv6 instead of believing nat and hiding ips somehow made them safer. God I miss the days of simple port mapping without worrying about turn servers. ---------------------------------------------------------------------- persiusone · 2023-11-03 18:51 Agreed. I've been in this since the 90s, but the Internet is a bit larger now (unfortunately) with all kinds of different challenges to consider. ---------------------------------------------------------------------- ElevenNotes · 2023-11-03 18:59 Common sense. ---------------------------------------------------------------------- applesoff · 2023-11-03 19:00 Haven't heard of that docker container ---------------------------------------------------------------------- ElevenNotes · 2023-11-03 19:01 Data centre provider here: You do something wrong if you let yourself get DDoSed to the client side. ---------------------------------------------------------------------- ElevenNotes · 2023-11-03 19:02 Believe it or not, wiregurad works best not installed in a container but on an edge router. ---------------------------------------------------------------------- applesoff · 2023-11-03 19:03 May I ask what leads you to that conclusion? Are there stats to show this? ---------------------------------------------------------------------- No_Dragonfruit_5882 · 2023-11-03 19:04 Well a datacenter can nullroute. I can only switch my redundant uplinks. And my Ddos Protection from my ISP is good. But 3-4 attacks come through. ---------------------------------------------------------------------- ElevenNotes · 2023-11-03 19:05 A simple one: OSPF and ACL. ---------------------------------------------------------------------- ElevenNotes · 2023-11-03 19:07 Wait a moment, you host for four companies but don't have your own BGP? Do you host in a single location? ---------------------------------------------------------------------- mausterio · 2023-11-03 19:08 Jesus OP, did CF turn down your job application or something? Like a lot of hate for something you don't use with an argument that doesn't even apply to the current outage 🤣 ---------------------------------------------------------------------- mausterio · 2023-11-03 19:13 As someone who's spent the last few months optimizing my rack to reduce my $350/m @ $~0.05Kwh I feel this post. ---------------------------------------------------------------------- tankerkiller125real · 2023-11-03 19:13 I want to note that at least for me, Cloudflare Access is still online and working just fine, and has been through the entire outage. ---------------------------------------------------------------------- No_Dragonfruit_5882 · 2023-11-03 19:15 Got 2 Locations. Companys are all owned by my family/Me. The 50 Users are 'small' companys and Users not belonging to our Companys. And no i dont have bgp If ddos Hits wan1 => Failover to Wan2 with a record => Failover to 5g/Lte fallback and no A records published. Critical Systems got 1 Day downtime a year at christmas. Non Critical Gameserver / Analystics / Webservers are offline when i get hit. I fully understand that a datacenter needs bgp. But since our Credit Terminals / Cashregisters / Backupsystems and the pbx are never offline when i get hit by a ddos, i didnt really see the need to protect anything more than it already is. But tbh if i had a datacenter i would get akamai ---------------------------------------------------------------------- No_Dragonfruit_5882 · 2023-11-03 19:22 I want to know your location. With 0.05 kwh ---------------------------------------------------------------------- SillyLilBear · 2023-11-03 22:32 Cloudflare has been having lots of outages lately. ---------------------------------------------------------------------- ElevenNotes · 2023-11-03 22:41 Ah okay if its your family business than I understand. ---------------------------------------------------------------------- CrispyBegs · 2023-11-04 00:20 jesus, give it a rest ---------------------------------------------------------------------- mausterio · 2023-11-04 05:35 Midwest USA here with variable rates, base rate is $0.045kWh but peak hours (M-F @ 6-8am and 6-8pm) are $0.16kWh ---------------------------------------------------------------------- lilolalu · 2023-11-04 08:08 So, you think you need Tailscale, right :) ---------------------------------------------------------------------- CrispyBegs · 2023-11-04 08:39 you seem upset ---------------------------------------------------------------------- lilolalu · 2023-11-04 08:40 No, I am not really. You on the other hand, bringing Jesus into the game and everything seem a little butthurt. ---------------------------------------------------------------------- CrispyBegs · 2023-11-04 08:41 very upset ---------------------------------------------------------------------- lilolalu · 2023-11-04 08:42 You think Jesus loves cloudflare too? ---------------------------------------------------------------------- No_Dragonfruit_5882 · 2023-11-04 14:24 That sounds pretty awsome. In germany everything is about climate, and they rather up the prices for us by 10, than do anything else ---------------------------------------------------------------------- HrBingR · 2023-11-06 12:40 I work for a company that has a ridiculous number of domains, workers, a few zero trust tunnels, people using the zero trust warp client, and a bunch of other paid services with CF. The only impact that we had at all was problematic access to the front end and the API. All other services were fine with zero issues on our end.