CloudFlare
VPS »

MultiformeIngegno

  • Messages: 1 337
CloudFlare
« le 4 Janvier 2012 à 18:40 »
I'm considering using it for some of my domains.. any opinions/experiences with this service? ;)

Nao

  • Dadman with a boy
  • Messages: 16 082
Re: CloudFlare
« Réponse #1, le 4 Janvier 2012 à 19:14 »
Hmm... Seems interesting. They're not really a host, are they?

MultiformeIngegno

  • Messages: 1 337
Re: CloudFlare
« Réponse #2, le 4 Janvier 2012 à 19:40 »
I tried CF on 3 of my domains and it works really well! It not only speeds up your website (significantly) by doing some caching operations "upstream" (they also have a server in Paris :) ), it also enhance security.

From a FAQ:
CloudFlare is a broad security solution that is designed to provide protection from many forms of malicious activity online including: comment spam, email harvesting, credential hacking, web software vulnerability, cross-site scripting (XSS) and SQL injection attacks. Both XSS and SQL injection attack protection are part of the Pro service.

Nao

  • Dadman with a boy
  • Messages: 16 082
Re: CloudFlare
« Réponse #3, le 4 Janvier 2012 à 19:47 »
I'm more interested in the CDN aspect than the protection it offers ;)

Again, is this a host (i.e. you upload your files to their servers), do they host entire files or select files, etc...?

MultiformeIngegno

  • Messages: 1 337
Re: CloudFlare
« Réponse #4, le 4 Janvier 2012 à 19:49 »
Citation de Nao le 4 Janvier 2012 à 19:47
Again, is this a host (i.e. you upload your files to their servers), do they host entire files or select files, etc...?
No, no. You just change the NS of your domain to point to theirs. In the "setup" process (before you change the NS) they scan your actual DNS configuration to reproduce it.

Nao

  • Dadman with a boy
  • Messages: 16 082
Re: CloudFlare
« Réponse #5, le 4 Janvier 2012 à 19:54 »
Oh I see. They act as a proxy then?

MultiformeIngegno

  • Messages: 1 337
Re: CloudFlare
« Réponse #6, le 4 Janvier 2012 à 19:56 »
Citation de Nao le 4 Janvier 2012 à 19:54
Oh I see. They act as a proxy then?
Yes.

CloudFlare acts as a proxy so once you sign up for CloudFlare all connecting IPs will come from the CloudFlare IP address.

Nao

  • Dadman with a boy
  • Messages: 16 082
Re: CloudFlare
« Réponse #7, le 4 Janvier 2012 à 20:28 »
Oh. So it breaks any classic stats. Although I don't use any Eheh.

MultiformeIngegno

  • Messages: 1 337
Re: CloudFlare
« Réponse #8, le 4 Janvier 2012 à 21:58 »Modifié le 4 Janvier 2012 à 23:06 par MultiformeIngegno
Citation de Nao le 4 Janvier 2012 à 20:28
Oh. So it breaks any classic stats. Although I don't use any Eheh.
They provide their own system. ;)
There are a lot of options you can choose, for example the automatic minification of CSS and javascript. or the forced support to IPv6, hotlink protection, the possibility to "crypt" emails in plain text present in your website and so on. :)

Arantor

  • As powerful as possible, as complex as necessary.
  • Messages: 14 278
Re: CloudFlare
« Réponse #9, le 6 Janvier 2012 à 19:27 »
We do our own minification, btw.

Though it will screw up IP detection though there is an option in Wedge already to look at alternative headers.
When we unite against a common enemy that attacks our ethos, it nurtures group solidarity. Trolls are sensational, yes, but we keep everyone honest. | Game Memorial

MultiformeIngegno

  • Messages: 1 337
Re: CloudFlare
« Réponse #10, le 6 Janvier 2012 à 20:22 »
Citation de Lurker le 6 Janvier 2012 à 19:27
We do our own minification, btw.
I know. :)
Citation de Lurker le 6 Janvier 2012 à 19:27
Though it will screw up IP detection though there is an option in Wedge already to look at alternative headers.
Uhm, I'm interested in this. You mean it screws up IP detection because all requests pass through their proxy?

Arantor

  • As powerful as possible, as complex as necessary.
  • Messages: 14 278
Re: CloudFlare
« Réponse #11, le 6 Janvier 2012 à 20:31 »
Yes. The real IP is supplied but SMF and Wedge don't automatically pick up on it. At least Wedge dan be configured for it.

Nao

  • Dadman with a boy
  • Messages: 16 082
Re: CloudFlare
« Réponse #12, le 6 Janvier 2012 à 21:18 »
That's interesting... Did you actually test CloudFlare, Pete?

MultiformeIngegno

  • Messages: 1 337
Re: CloudFlare
« Réponse #13, le 6 Janvier 2012 à 21:57 »
I should give this a try.. the strange thing is that they released a plugin for Wordpress and they declare that their system works perfectly with forums/blogging platforms and it helps threats/spam prevention on posts/comments.. I have a few blogs/forums in sites I'm testing on cloudflare, if I'm right you're saying that I should see in SMF's users IP history or IP of commenters on wordpress not their real ip but clouflare one (because of the proxy)?

Arantor

  • As powerful as possible, as complex as necessary.
  • Messages: 14 278
Re: CloudFlare
« Réponse #14, le 6 Janvier 2012 à 22:18 »
Citation de Nao le 6 Janvier 2012 à 21:18
That's interesting... Did you actually test CloudFlare, Pete?
No, but then again I didn't have to. The supplied REMOTE_ADDR is the CloudFlare IP address and the real address is supplied in a Cf-Connecting-Ip header or something along those lines; it should be tested for in Security.php.