Re:Ask HN: How is BunnyCDN DDoS protection VS Cloudflare?
by HappyCathode on Saturday June 17, 2023 @12:02PM
(#36371408)
I'm planning on dropping anything that doesn't come from https://www.cloudflare.com/en-ca/ips/, but the tunnels in indeed even better... don't have to stay up-to-date with IP list, and don't have to waste CPU dropping bad traffic. Cloudflare is indeed the safest known solution.
And yeah Bunny.net are getting annoying with their "Coming Soon" stuff. S3 API has been "almost ready" since at least 2020, according to one of their Twitter post. It looks like they are way too small to deliver, but I really like them and I hope they will.
Re:Ask HN: How is BunnyCDN DDoS protection VS Cloudflare?
by decide1000 on Saturday June 17, 2023 @05:28PM
(#36374824)
How would you find the origin ip with Bunny?
They proxy it as well right?
Re:Ask HN: How is BunnyCDN DDoS protection VS Cloudflare?
by HappyCathode on Saturday June 17, 2023 @08:49PM
(#36376259)
I think they meant that your public IPs are responding to requests on :80 and :443. Port scanners are going to find it pretty fast and have fun.
Otherwise your origin is still public and there are ways to find out and attack it (bypassing Bunny) easily.
Cloudflare also has a WAF that Bunny says is coming soon (doesn’t apply to DNS only).
Bunny DNS is a relatively new product so it’s not as well tested.