« Chrome: clear all cookies at exit but one
CloudFlare
Strange problem with RewriteCond »

Offline MultiformeIngegno

  • Modérateur
  • Posts: 804
  • I have the tickets for the Coldplay live in Turin!!!!! :D
    • View profile
    • multiformeingegno
CloudFlare
« on January 4th, 06:40 PM »
I'm considering using it for some of my domains.. any opinions/experiences with this service? ;)
RockCiclopedia (wiki - forum - extra)
Tutta la storia del rock, scritta da voi ...

Online Nao

  • Wedgeward
  • Posts: 10,275
  • Reality check: I just discovered that Wedge already has a 'Mark unread' button for PMs, a feature in my to-do. Uh. It just isn't in the 'right' place...
    • View profile
    • Cynacittà @ noisen
Re: CloudFlare
« Reply #1 on January 4th, 07:14 PM »
Hmm... Seems interesting. They're not really a host, are they?
  I say Wedge Wedge (in the butt)
« Everyone knows rock attained perfection in 1974. It's a scientific fact. » (Homer Simpson)

Offline MultiformeIngegno

  • Modérateur
  • Posts: 804
  • I have the tickets for the Coldplay live in Turin!!!!! :D
    • View profile
    • multiformeingegno
Re: CloudFlare
« Reply #2 on January 4th, 07:40 PM »
I tried CF on 3 of my domains and it works really well! It not only speeds up your website (significantly) by doing some caching operations "upstream" (they also have a server in Paris :) ), it also enhance security.

From a FAQ:
CloudFlare is a broad security solution that is designed to provide protection from many forms of malicious activity online including: comment spam, email harvesting, credential hacking, web software vulnerability, cross-site scripting (XSS) and SQL injection attacks. Both XSS and SQL injection attack protection are part of the Pro service.
RockCiclopedia (wiki - forum - extra)
Tutta la storia del rock, scritta da voi ...

Online Nao

  • Wedgeward
  • Posts: 10,275
  • Reality check: I just discovered that Wedge already has a 'Mark unread' button for PMs, a feature in my to-do. Uh. It just isn't in the 'right' place...
    • View profile
    • Cynacittà @ noisen
Re: CloudFlare
« Reply #3 on January 4th, 07:47 PM »
I'm more interested in the CDN aspect than the protection it offers ;)

Again, is this a host (i.e. you upload your files to their servers), do they host entire files or select files, etc...?
  I say Wedge Wedge (in the butt)
« Everyone knows rock attained perfection in 1974. It's a scientific fact. » (Homer Simpson)

Offline MultiformeIngegno

  • Modérateur
  • Posts: 804
  • I have the tickets for the Coldplay live in Turin!!!!! :D
    • View profile
    • multiformeingegno
Re: CloudFlare
« Reply #4 on January 4th, 07:49 PM »
Quote from Nao on January 4th, 07:47 PM
Again, is this a host (i.e. you upload your files to their servers), do they host entire files or select files, etc...?
No, no. You just change the NS of your domain to point to theirs. In the "setup" process (before you change the NS) they scan your actual DNS configuration to reproduce it.
RockCiclopedia (wiki - forum - extra)
Tutta la storia del rock, scritta da voi ...

Online Nao

  • Wedgeward
  • Posts: 10,275
  • Reality check: I just discovered that Wedge already has a 'Mark unread' button for PMs, a feature in my to-do. Uh. It just isn't in the 'right' place...
    • View profile
    • Cynacittà @ noisen
Re: CloudFlare
« Reply #5 on January 4th, 07:54 PM »
Oh I see. They act as a proxy then?
  I say Wedge Wedge (in the butt)
« Everyone knows rock attained perfection in 1974. It's a scientific fact. » (Homer Simpson)

Offline MultiformeIngegno

  • Modérateur
  • Posts: 804
  • I have the tickets for the Coldplay live in Turin!!!!! :D
    • View profile
    • multiformeingegno
Re: CloudFlare
« Reply #6 on January 4th, 07:56 PM »
Quote from Nao on January 4th, 07:54 PM
Oh I see. They act as a proxy then?
Yes.

CloudFlare acts as a proxy so once you sign up for CloudFlare all connecting IPs will come from the CloudFlare IP address.
RockCiclopedia (wiki - forum - extra)
Tutta la storia del rock, scritta da voi ...

Online Nao

  • Wedgeward
  • Posts: 10,275
  • Reality check: I just discovered that Wedge already has a 'Mark unread' button for PMs, a feature in my to-do. Uh. It just isn't in the 'right' place...
    • View profile
    • Cynacittà @ noisen
Re: CloudFlare
« Reply #7 on January 4th, 08:28 PM »
Oh. So it breaks any classic stats. Although I don't use any Eheh.
  I say Wedge Wedge (in the butt)
« Everyone knows rock attained perfection in 1974. It's a scientific fact. » (Homer Simpson)

Offline MultiformeIngegno

  • Modérateur
  • Posts: 804
  • I have the tickets for the Coldplay live in Turin!!!!! :D
    • View profile
    • multiformeingegno
Re: CloudFlare
« Reply #8 on January 4th, 09:58 PM » Last edited on January 4th, 11:06 PM
Quote from Nao on January 4th, 08:28 PM
Oh. So it breaks any classic stats. Although I don't use any Eheh.
They provide their own system. ;)
There are a lot of options you can choose, for example the automatic minification of CSS and javascript. or the forced support to IPv6, hotlink protection, the possibility to "crypt" emails in plain text present in your website and so on. :)
RockCiclopedia (wiki - forum - extra)
Tutta la storia del rock, scritta da voi ...

Offline Arantor

  • Wedgeward
  • Posts: 10,364
  • The Twelve Tasks of Asterix is awesome.
    • View profile
    • Innovate, not Imitate
Re: CloudFlare
« Reply #9 on January 6th, 07:27 PM »
We do our own minification, btw.

Though it will screw up IP detection though there is an option in Wedge already to look at alternative headers.
   computer-aided
   community building		             

Other stuff:

Offline MultiformeIngegno

  • Modérateur
  • Posts: 804
  • I have the tickets for the Coldplay live in Turin!!!!! :D
    • View profile
    • multiformeingegno
Re: CloudFlare
« Reply #10 on January 6th, 08:22 PM »
Quote from Lurker on January 6th, 07:27 PM
We do our own minification, btw.
I know. :)
Quote from Lurker on January 6th, 07:27 PM
Though it will screw up IP detection though there is an option in Wedge already to look at alternative headers.
Uhm, I'm interested in this. You mean it screws up IP detection because all requests pass through their proxy?
RockCiclopedia (wiki - forum - extra)
Tutta la storia del rock, scritta da voi ...

Offline Arantor

  • Wedgeward
  • Posts: 10,364
  • The Twelve Tasks of Asterix is awesome.
    • View profile
    • Innovate, not Imitate
Re: CloudFlare
« Reply #11 on January 6th, 08:31 PM »
Yes. The real IP is supplied but SMF and Wedge don't automatically pick up on it. At least Wedge dan be configured for it.
   computer-aided
   community building		             

Other stuff:

Online Nao

  • Wedgeward
  • Posts: 10,275
  • Reality check: I just discovered that Wedge already has a 'Mark unread' button for PMs, a feature in my to-do. Uh. It just isn't in the 'right' place...
    • View profile
    • Cynacittà @ noisen
Re: CloudFlare
« Reply #12 on January 6th, 09:18 PM »
That's interesting... Did you actually test CloudFlare, Pete?
  I say Wedge Wedge (in the butt)
« Everyone knows rock attained perfection in 1974. It's a scientific fact. » (Homer Simpson)

Offline MultiformeIngegno

  • Modérateur
  • Posts: 804
  • I have the tickets for the Coldplay live in Turin!!!!! :D
    • View profile
    • multiformeingegno
Re: CloudFlare
« Reply #13 on January 6th, 09:57 PM »
I should give this a try.. the strange thing is that they released a plugin for Wordpress and they declare that their system works perfectly with forums/blogging platforms and it helps threats/spam prevention on posts/comments.. I have a few blogs/forums in sites I'm testing on cloudflare, if I'm right you're saying that I should see in SMF's users IP history or IP of commenters on wordpress not their real ip but clouflare one (because of the proxy)?
RockCiclopedia (wiki - forum - extra)
Tutta la storia del rock, scritta da voi ...

Offline Arantor

  • Wedgeward
  • Posts: 10,364
  • The Twelve Tasks of Asterix is awesome.
    • View profile
    • Innovate, not Imitate
Re: CloudFlare
« Reply #14 on January 6th, 10:18 PM »
Quote from Nao on January 6th, 09:18 PM
That's interesting... Did you actually test CloudFlare, Pete?
No, but then again I didn't have to. The supplied REMOTE_ADDR is the CloudFlare IP address and the real address is supplied in a Cf-Connecting-Ip header or something along those lines; it should be tested for in Security.php.
   computer-aided
   community building		             

Other stuff:
« Chrome: clear all cookies at exit but one
Strange problem with RewriteCond »