Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So rather than demand fixes for the fundamental issues that enable ddos attacks (preventing IP spoofing, allowing infected computers to remain connected, etc), we just continue down this path of massive centralization of services into a few big players that can afford the arms race against bonnets.

Using services like Cloudflare as a 'fix' is wrecking the decentralized principles of the Internet. At that point we might as well just write all apps as Facebook widgets.



When in a tactical emergency do not say "and why is this shit raining down upon us?"

That is a separate step. First you either take cover or help.


Problem most often is that after you take cover, you forget to ask that question.


Thats not true though


Interesting, so to make people stop thinking strategically and run the way I want, just throw shit at you?

Do you see a problem with that?


However, I haven't seen people enable ButtFlare's proxy only when under DDoS. Most of their users enable the proxying just for the CDN performance or just in case or… you get the idea.


Once your origin is under a DDoS attack, how would Cloudflare's proxy help?


Yeah, it wouldn't help if the attackers don't resolve the DNS hostname on ~every request :D But then, there are ways to find the origin anyway (when buttflare is enabled), someone in this thread posted the real IP address of Hacker News…


You stand up the service somewhere else, and point the cloudflare proxy at that.

Everyone in the "cloud" is able to do the migration even without having prepared a disaster recovery plan ahead of time.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: