Quote from: AB de Royse777 on July 29, 2024, 11:14:25 AM

Quote from: ABCbits on July 29, 2024, 09:06:45 AM

As reminder, using CloudFlare already reduce our privacy. I also recall theymos would change if there's other technology or service which isn't far more expensive than CloudFlare.

Privacy of the forum users comes first or the expense? If we did not have enough money than it was something else.

I'll just quote some of theymos posts.

Quote from: theymos on January 05, 2023, 09:09:41 PM

Quote from: n0nce on January 05, 2023, 01:05:21 PM

Has anything changed on the topic of DDoS protection? Maybe new, better options? Cheaper, easier to set up?

Not really. I don't know of any better solution which wouldn't require a lot of manual work to keep it working.

Cloudflare actually isn't even very good at identifying bad traffic or delivering on several of its claimed features, but it offers two extremely valuable tools:
1. It completely blocks even massive IP/UDP/TCP flooding without any thought on the end-user's part. My custom DDoS protection was also able to block these attacks, but it required a significant amount of sysadmin work.
2. My custom protection failed against layer-7 attacks from 100k+ IPs. To handle these attacks, there needs to be some sort of proof-of-work/CAPTCHA challenge before the application starts making database queries and such. These challenges must exist on servers which will automatically scale to handle any number of requests, as needed. The challenge servers must have the HTTPS key in order to function. It would definitely be possible to do this without something like Cloudflare, and I've posted a general description of how it could be done, but both the coding and sysadmin work are more than I want to deal with.

Cost is a consideration, but not the primary one: I'd consider paying 10-30x more than Cloudflare's $250/mo, if this came with significant improvements. But as far as I know, you don't actually get much more by paying an "enterprise" DDoS protection company $5000/mo than you do by paying Cloudflare $250/mo, and in fact you often seem to get less.

Quote from: ranochigo on July 29, 2024, 12:19:25 PM

This challenge only comes up when you're using known Tor/Proxy IPs which is usually where DDOS attacks originate from. In terms of L7 attacks, the challenge is what limits its effectiveness before it hits your site. When facing large DDOS attacks or sophisticated ones, you don't have many good options beyond CloudFlare. Privacy is compromised eitherways when traffic has to go through someone else before you.

At least for DDoS by attacker who use Tor network, it can be mitigated by enabling PoW feature.