News for hackers. Stuff that matters.

A comment on Too big to care? Our disappointment with Cloudflare anti-abuse posture.

Re:Too big to care? Our disappointment with Cloudflare anti-... by quilnux on Tuesday July 30, 2024 @05:06PM (#41114137)
Our organization dropped trust of Cloudflare and all it's IP address assignments a while back. We don't allow any data from their networks, CDNs, or A-DNS's to be received by our network.

It is just not worth dealing with Cloudflare at all in a business network.

[ Parent | on HN ]
Re:Too big to care? Our disappointment with Cloudflare anti-... by oneplane on Tuesday July 30, 2024 @05:12PM (#41114189)
That essentially means that you can't use any services that happen to be hosted behind Cloudflare, like OpenAI/ChatGPT, GitLab, Hubspot and Shopify. And anyone on WARP and about half of iCloud Private Relay requests won't make it to your services.

I suppose it strongly depends on your organisation, but I'm not seeing how this would be a realistic option unless you're very powerful or have a lot of cash to burn on non-core business processes.

[ Parent | on HN ]
Re:Too big to care? Our disappointment with Cloudflare anti-... by deceptionatd on Tuesday July 30, 2024 @05:25PM (#41114290)
They're the CDN in front of ~19% of websites [1] and the DNS provider for ~16% [2]. Doesn't that mean your staff can't access any of those sites?

[1]: https://w3techs.com/technologies/details/cn-cloudflare [2]: https://6sense.com/tech/domain-name-services/cloudflare-dns-...

[ Parent | on HN ]
Re:Too big to care? Our disappointment with Cloudflare anti-... by tick_tock_tick on Tuesday July 30, 2024 @05:15PM (#41114210)
Have you run into any issues yet with Cloudflare customer using their Gateway Zero trust offerings that end up egressing with Cloudflare IPs or how do you plan on handling that as that business grows?

Apple private relay is also fronted by Cloudflare or are actually allowing large amounts of traffic from Clouldflare?

[ Parent | on HN ]