Re:Cloudflare CDN Partial Outage
by jgrahamc on Tuesday October 25, 2022 @01:48PM
(#33333887)
Fix is rolling out.
[ Parent
| on HN ]
Re:Cloudflare CDN Partial Outage
by throwthere on Tuesday October 25, 2022 @02:20PM
(#33334283)
Is this related to switching the firmware on the Minitel 2?
I knew I shouldn't have done that: https://blog.jgc.org/2022/10/adding-mode-switch-to-my-minite...
I'd like to read an article about how the firmware caused the outage. It wouldn't be true, but it'd be a fun read.
10 years ago we bought every Minitel in existence from eBay and connected them into a giant X.25 network spanning the globe. Unfortunately, one EPROM didn't have a cover over its window and bright sunlight in Madrid caused firmware corruption.
Re:Cloudflare CDN Partial Outage
by ThePowerOfFuet on Tuesday October 25, 2022 @04:06PM
(#33335474)
> 10 years ago we bought every Minitel in existence from eBay and connected them into a giant X.25 network spanning the globe. Unfortunately, one EPROM didn't have a cover over its window and bright sunlight in Madrid caused firmware corruption.
What a tease. If only.
Re:Cloudflare CDN Partial Outage
by geocrasher on Tuesday October 25, 2022 @01:58PM
(#33334034)
Many thanks sir, from a company that uses Cloudflare Enterprise for delivery.
Thank you! What happened out of curiosity?
Team is writing it up. Will get it out later today.
We were seeing some pages with cookies incorrectly getting cached, causing users to get logged in as other users. We quickly disabled cache on the dashboard, is this related to that?
Please email me details (jgc).
Curious what you find happened with that.
On the webdev side—what can be done as extra defense-in-depth step to guard against this kind of issue? Unrelated to Cloudflare I feel like it is a common issue that crops up on even massive sites quite often. Is there some sort of secondary check / content decryption that could be required on the client-side to contain session cookie crossover?
Outside of HTTPS, typically it would be tying the session cookie to the IP address or netblock but because it's Cloudflare IPs, for regular browser navigation requests I don't think there's anything that can be done?
Awesome - thanks :)
Re:Cloudflare CDN Partial Outage
by outworlder on Tuesday October 25, 2022 @02:24PM
(#33334338)
Doubtful anyone would post anything here before there's time to write a proper RCA.
Re:Cloudflare CDN Partial Outage
by stingraycharles on Tuesday October 25, 2022 @01:51PM
(#33333935)
(Parent is CTO of CloudFlare for those unaware)
Re:Cloudflare CDN Partial Outage
by outworlder on Tuesday October 25, 2022 @02:25PM
(#33334339)
I wish my CTO even knew what HN was.
Re:Cloudflare CDN Partial Outage
by carlhjerpe on Tuesday October 25, 2022 @05:40PM
(#33336534)
Some would be happy if their CTO knew anything about computing!