Bane of my existence as obligate VPN user
Ask Lemmy
A Fediverse community for open-ended, thought provoking questions
Rules: (interactive)
1) Be nice and; have fun
Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them
2) All posts must end with a '?'
This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?
3) No spam
Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.
4) NSFW is okay, within reason
Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com.
NSFW comments should be restricted to posts tagged [NSFW].
5) This is not a support community.
It is not a place for 'how do I?', type questions.
If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.
6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online
Reminder: The terms of service apply here too.
Partnered Communities:
Logo design credit goes to: tubbadu
This image is inaccurate, because it suggests Cloudflare is a small block. The original xkcd makes more sense, because it is a project run by a single person. To represent Cloudflare, it should be a huge block given it's a very large company with a market cap of $69 billion.
Fair enough, one other guy said it should be the thin block above the one pointed to. Makes sense, and it can still be yanked from under you.
/rant on I think CloudFlare is the direct result of the enshitififcation of development work.
People write an insecure app in Express/Flask/whatever, deploy it to the internet, then bolt on Cloudflare as a WAF and add Datadog because they have no idea what's happening under the hood or limited themselves with their up-front choices.
This is marketed as progress. /rant off
But there are valid use cases like you mentioned. And it's the enshitifed sites that fund that free tier.
There's some irony about the Fediverse going through a centralized service, but I don't know of a better free answer. A cheap answer might be a VPS with Caddy and automatic Lets Encrypt, but it's not turnkey.
Admin of Feddit.dk. We try not to use non-EU suppliers and I don't like the idea of depending so fully on something like Cloudflare. I could see us using an EU equivalent but don't really see the need right now.
The modern Internet would be way worse without it, but it still sucks how centralized it is.
I use it for a couple websites. I'm a geek and can make things work software wise but I'm absolutely not a programmer, I just don't really grasp a lot of it. Give me some hardware and I can build whatever but I digress. Cloudflare has prevented a bunch of attacks on my sites and the caching function is helping stave off switching to a VPS for now.
It can be a PITA if you don't have native IPv6 and use Hurricane Electric's IPv6 tunnel broker. A lot of sites that are hooked into cloudflare and some other similar services pop up captcha's every visit or just pain don't function correctly. I'm going to switch to Route64 as an alternative to HE, they only provide a /56 vs a /48 but it's not like I'm going to need that many /64's at this point.
In addition to the tech reasons mentioned, the click here checkbox is just a fucking infuriating interruption
I’d say selfhosting is the shelf that is standing under this.
I literally can not see most images from lemmy.zip because of the cloudfare craptcha.
Is that what it is? I thought it was just my app being weird, but then I see similar stuff in the browser, too.
If you use your web browser for lemmy, find a .zip post and try to view the image directly when it resuses to load. You'll immediately get a cloudfare craptcha and then for that session lemmy.zip images will be more willing to work
Doesn't seem to do anything with Alexandrite, does Photon fare any better?
I don't think there are any workarounds for the apps. Cloudfare uses sessions that also take what client you're using into account. I more of said that comment so anyone can see the proof for themselves.
It's a free way to get a reverse proxy for a self hosted website and not expose your home IP and avoid attacks, so kind of hard to pass up tbh.
Cloudflare is one of the secret ruling parties of the internet.
I don't understand why so many Americans like to use it, even the ones who tend to think liberal and go for self hosting.
What are the alternatives?
And a VPS and any number of tunneling systems for the remote reverse proxy.
Rathole is my goto. But SSH forwarding, wireguard... There's plenty, even ones that will entirely manage the reverse proxy on the VPS.
it's making the internet centralized and proprietary, i hate it. i do understand how it's a very easy option for website operators struggling against malicious bots though.
Dev here, building a public SaaS app. I'm aware of the centralization arguments, but CF seems to be the least worst of all the options in terms of alternatives. CAPTCHAs are awful, and I can't put up my own multi-Tbps DDOS buffer. I also regularly access my own resources from behind multiple VPNs; other than having to click the human button it doesn't consign me to an evening of identifying traffic lights.
What, LLM scrapers still don't solve captchas, despite being better at them than humans? How come?
The ones that require traffic lights and shit never seem to work properly for me. They always make me do an endless repetition of them, going through dozens and dozens before it finally, maybe lets me see the website I was trying to get to.
Maybe I'm just not human enough?
I've found that clicking them slower (until the new image is fully faded in) can help for the ones that have images disappearing after clicking, and not actually clicking every square containing part of the traffic light (if it's only a tiny edge) helps with the ones that are one image of a thing. I guess being fast or noticing details isn't human enough. Having to wait is insanely annoying though.
It might be your browser or extensions. I get that more on Librewolf than Mullvad, for example.
I mainly use Cloudflare for buying domains and DNS settings. Are there better, more resilient alternatives? I am not savvy enough for a hyper custom setup. I think I've seen Porkbun mentioned. I've used name cheap before. I do pay for NextDNS - is that something that could fit into this? I don't think so but maybe I'm underutilizing it.
I'm happy with porkbun. They're pretty well integrated ddclient now, but make sure the version you use has them already
PORKBUN FTW! 🐷
I also love Porkbun, but unfortunately they've recently moved their DNS backend to Cloudflare, soooo...
goddammit why can't I have nice things?
Isn't Cloudflare more like the thin horizontal block above that one?
That would imply the web stack wouldn't crash if you remove them.
It’s like jenga, janga? Idk how to spell it. Try pulling that one out without it crashing. Sure it could stand if it were never there in the first place, but it is there, so therefore it’s gonna be a pain to remove it safely
Self-host or die trying !
Self hosting is why I use CF I like the tunnels for exposing myself to the internet.
still need em for DNS (I think)
There are alternate providers, like Cloud9 or Mullvad !
all my computer science and IT knowledge end when it comes to networks.
Honestly if you want to try it on Firefox, they have a few options built-in for alternative DNS !
And I feel your pain, my CS bachelor's had like 0 courses on Networking, fortunately my current Engineering degree courses have great stuff available, so I'm finally catching up !
Proprietary centralisation and gatekeeping of the internet, built by a profit first company that actively and deliberately protected nazis and kiwifarms until it became financially harmful for them to continue to do so.
They can fuck right off.
Cloudflare isn’t profitable according to their quarterly earnings reports.
I hope you can appreciate that that does not in any way change my reply