News for hackers. Stuff that matters.
Re:Do Not Put Your Site Behind Cloudflare If You Don't Need To by herbst on Tuesday November 18, 2025 @12:38PM (#45969443)
Concurrent and constant. This is nothing like real traffic, nothing like the good old hug of death.

It seems to find the slowest endpoints (well it does like my search and category pages, but sometimes it really hammers a single page for an hour), builds up until your site goes into its knees and instead of going slower it starts to hammer from other IP ranges until you have them all banned. This can go on for hours (or days even) if I don't create new rules to ban it.

It reminds me of a slowloris dos but at large scale and concurrency.

Sure if my website didn't have any dynamic content, or not millions of database lines it would be less of an issue :)

Re:Do Not Put Your Site Behind Cloudflare If You Don't Need To by rsync on Tuesday November 18, 2025 @12:45PM (#45969543)
Genuinely curious: Do you run this on single tenant hardware that you own ?
Re:Do Not Put Your Site Behind Cloudflare If You Don't Need To by herbst on Tuesday November 18, 2025 @01:19PM (#45969980)
No, it's several virtual server mostly because simplicity and I sleep better at night :)