I'm starting to love Cloudflare now.

Discussion in 'Finance and Traffic' started by The7thSage, Oct 15, 2011.

  1. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Hi

    Hope so! We have some cool stuff in the works.
     
  2. pinkiepie

    pinkiepie Enthusiast

    204
    53
    +6
    Awesome! ;-) can't wait!
     
  3. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Hi,

    I just wanted to advise that CloudFlare has added two new IP ranges. While we aren't broadcasting over them just yet, I would recommend whitelisting the new additions if you're doing any sort of IP restrictions in your firewall, .htacess, etc.

    Our full list of CloudFlare IPs. The new additions to the list are:

    190.93.240/20

    2803:f800::/32
     
  4. eva2000

    eva2000 Habitué

    1,214
    837
    +290
    thanks for heads up, already updated http://centminmod.com/nginxconfigure/ :)
     
  5. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Hi,

    You are just too good:)

    Here's how to update mod_cloudflare for Apache users (assume there are a few in this thread).

    Note: We will help our hosting providers update this automatically, so no need to update if you signed up through a hosting partner.
     
  6. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    CloudFlare updates

    Just a quick note that we have built a new app called ScrapeShield that site owners can use to contend with content theft and tracking.
     
  7. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    The new CloudFlare UI is now live. Please let us know if you see any issues with the new UI and/or have any questions.
     
  8. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Just a gentle reminder that we have started broadcasting over new CloudFlare IPs. We would strongly recommend updating your firewall and server allow rules to make sure that connections from CloudFlare's IPs are accepted by your server to prevent potential access issues for your visitors.
     
  9. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Just a couple of quick CloudFlare notes:

    We now support International Domain Names

    CloudFlare is now an option to activate via Dreamhost's panel.

    Note: If you're already active on CloudFlare, please do not also activate at a hosting partner's panel option as well (will create issues).
     
  10. dandroid

    dandroid Aspirant

    41
    8
    +1
    For what it's worth, I have been using this service for a few months now, so I figured I would post a few observations:

    • Bandwidth wise, it isn't saving me any money. According to my host, I am still using the same amount, sometimes even more now.
    • I absolutely love the fact that I can lock down my server even more now, and only allow traffic from CloudFlare IP addresses.
    • The only major annoyance is that it seems to interfere with form based upload/POST requests (using Joomla & IPB in this case), to the point I had to drop the level of protection to minimal levels, which somewhat defeats the purpose (especially since I am a paying customer).

    That said, I decided to keep the service for now, just because this service offers the most bang for the buck, and it really does help protect your server.
     
  11. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Hi,

    "[*]Bandwidth wise, it isn't saving me any money. According to my host, I am still using the same amount, sometimes even more now.

    (We wouldn't really be doing anything to increase your bandwidth usage. This seems odd).

    "[*]I absolutely love the fact that I can lock down my server even more now, and only allow traffic from CloudFlare IP addresses.
    (A good step to help limit threats from DDoS attacks. As we do periodically add new IPs, however, I would recommend keeping an eye on CloudFlare's IPs).

    Note: I do try to come here to update people when we add new IPs.


    [*]The only major annoyance is that it seems to interfere with form based upload/POST requests (using Joomla & IPB in this case), to the point I had to drop the level of protection to minimal levels, which somewhat defeats the purpose (especially since I am a paying customer).
    [/LIST]

    Interesting. Where is this happening? Does whitelisting the IPs in your threat control panel help?

    Note: I would generally recommend excluding the admin section of your site from CloudFlare with a Page Rule.
     
  12. dandroid

    dandroid Aspirant

    41
    8
    +1
    hi Damon,

    I actually did exclude the admin section (page rules are a great feature!), but sometimes, images are still broken. Not as big of a deal yet.

    As for the uploads, it happens randomly, to random people. Whitelisting does address the issue, but since it happens to so many people, it's hard to keep up with that, plus most people don't have static IP addresses.

    I would love a feature which allows me to debug why a request was blocked (with actual technical data), so I can work on bumping my security settings back up.

    Still a happy customer tho!
     
  13. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    "I actually did exclude the admin section (page rules are a great feature!), but sometimes, images are still broken. Not as big of a deal yet."
    Images breaking sounds more like a Rocket Loader issue, if you're doing things with JavaScript or jQuery (seen a lot of lightboxes break with it on, for example). Does turning off Rocket Loader, if on, fix this issue?

    "As for the uploads, it happens randomly, to random people. Whitelisting does address the issue, but since it happens to so many people, it's hard to keep up with that, plus most people don't have static IP addresses."
    Sounds like the Web Application Firewall. Does this only happen on a certain part of the site, such as something like uploads.yourdomain.com or yourdomain.com/uploads?

    "I would love a feature which allows me to debug why a request was blocked (with actual technical data), so I can work on bumping my security settings back up."
    Definitely working on more details:)
     
  14. dandroid

    dandroid Aspirant

    41
    8
    +1
    It mostly happens when file uploads are involved (although complex POST submissions can trigger it as well). Rocket Loader is disabled.

    Also, I forgot to mention, my site is IPv6 enabled thanks to CloudFlare, and I am actually getting registrations via IPv6 connections now, so it definitely matters!
     
  15. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Hi,

    "It mostly happens when file uploads are involved (although complex POST submissions can trigger it as well)."

    Yes, can be a trigger. We're actually working on building a better Web Application Firewall:)

    "Also, I forgot to mention, my site is IPv6 enabled thanks to CloudFlare, and I am actually getting registrations via IPv6 connections now, so it definitely matters! "
    I can't believe how many users don't know about our free IPv6 Gateway. I try to tell folks about it.
     
  16. pinkiepie

    pinkiepie Enthusiast

    204
    53
    +6
    now if we can get the ISPs to catch up!
     
  17. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Hi,

    Well....larger organizations tend to move slower than startups like ours:)
     
  18. SticKer

    SticKer Neophyte

    8
    0
    +0
    It's been about a month now since I started using cloudflare. Page load times have improved and from the analytics it seems it has blocked quite a few bad bots, crawlers and visitors and also saved some bandwidth too.
     
  19. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    Hi,

    Exactly what we like to hear:) Have you tried any optional features at all as well (most of them are free)?
     
  20. damoncloudflare

    damoncloudflare Enthusiast

    176
    33
    +6
    I just wanted to highlight that CloudFlare and OpenDNS have teamed up to help fight the DNSChanger malware.
     
Verification:
Draft saved Draft deleted