I thought I could finally enjoy a weekend, but the way phpc.tv uses @cloudflare is apparently against their ToS.
-
@kravietz Because I want to avoid bot traffic, which can make me wake up to a big invoice if YouTube decides to give me even 0.001% of their attention for a few hours, just to make sure I lose the desire and ability to take away their monopoly.
By the way, I run a moderately popular PeerTube instance for ~3 years and I don't see much bot traffic problem (but I'm using that bot blocker almost from the beginning).
-
Here's an easy solution for that particulat problem!
GitHub - mitchellkrogza/nginx-ultimate-bad-bot-blocker: Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders - mitchellkrogza/nginx-ultimate-bad-bot-blocker
GitHub (github.com)
@kravietz Whichever approach I choose, my weekend cannot be reclaimed. I need to investigate, read docs, try stuff and not break anything, while I feel like CloudFlare just put a gun to my head. I'm not rested enough to deal with something like this right now.
-
@kravietz Whichever approach I choose, my weekend cannot be reclaimed. I need to investigate, read docs, try stuff and not break anything, while I feel like CloudFlare just put a gun to my head. I'm not rested enough to deal with something like this right now.
@kravietz I'm basically exhausted and in panic mode.
-
@kravietz I'm basically exhausted and in panic mode.
@kravietz On top of that I've dumped so much money into this and am trying really hard to avoid cancelling all my open source donations (again!) until I can get contributions up and running for this project. I've been cancelling a bunch of other subscriptions to trim things down and CloudFlare was basically asking me to make an Enterprise plan, which I don't even know how much but clearly above what I can spare.
-
My appeal to @cloudflare fell on deaf ears, despite my mentioning that it's a community project out of a volunteer's pocket. I'm not even asking for free services here, but just a bit of flexibility. I'm so tired and I need to finish preparing a full-day workshop. It makes me want to cry.
This support agent (Miguel) I'm talking to accused me of violating the ToS, gave me instructions that don't actually work, failed to respond to half on my messages, while still marking them as closed on each step. That's rude and stressful. Just when I thought that @cloudflare was actually good.
-
This support agent (Miguel) I'm talking to accused me of violating the ToS, gave me instructions that don't actually work, failed to respond to half on my messages, while still marking them as closed on each step. That's rude and stressful. Just when I thought that @cloudflare was actually good.
@afilina @cloudflare i do not have any alternative, only to add pointlessly "yep" because i have been anti-cloudflare since day one, since back when they first allowed their engineers to openly argue with people on twitter getting them to say things they shouldn't.
remember their original offering?
"server down? we serve the last good version."
suddenly the internet became thousands of cloudflare "server unreachable" and zero instances of ever serving cached pages. lies from the start.
-
I thought I could finally enjoy a weekend, but the way phpc.tv uses @cloudflare is apparently against their ToS. So now I have to find out how to keep things running while remaining compliant, on a budget, on top of their having refused to raise the upload limit, which I also need to fix somehow. I guess this is why communities keep getting stuck with YouTube, Facebook and the likes. Unless you run everything out of your basement, there will always be someone threatening to pull the plug.
@afilina For what it's worth, Cory Doctorov uses https://deflect.ca/, and I have it on my list for if/when I need CF-like protection.
It might suit your purposes and they might be happy to accommodate community projects.
At any rate they look and feel human scale...
-
R relay@relay.infosec.exchange shared this topic
-
@afilina For what it's worth, Cory Doctorov uses https://deflect.ca/, and I have it on my list for if/when I need CF-like protection.
It might suit your purposes and they might be happy to accommodate community projects.
At any rate they look and feel human scale...
@jpoesen Bookmarked just in case, thanks.
-
@sarah Well I was also using CF for their R2 storage, and I spent days configuring everything to finally work well together.
@afilina @sarah I have also heard better things about fastly. But I have no personal experience to back it up. They do offer https://www.fastly.com/products/storage with no zero egress fees so there might be something to work with. I love the idea of phpc.tv and think the work you’re doing is amazing. Would you be open to sponsorship or to others helping out so you don’t shoulder costs and frustrations alone?
-
@afilina @sarah I have also heard better things about fastly. But I have no personal experience to back it up. They do offer https://www.fastly.com/products/storage with no zero egress fees so there might be something to work with. I love the idea of phpc.tv and think the work you’re doing is amazing. Would you be open to sponsorship or to others helping out so you don’t shoulder costs and frustrations alone?
@turegjorup Thanks, there's something currently in the works with regards to sponsorships, and I'm just waiting for the ok on that (but don't know when that will be). @sarah
-
@afilina @sarah I have also heard better things about fastly. But I have no personal experience to back it up. They do offer https://www.fastly.com/products/storage with no zero egress fees so there might be something to work with. I love the idea of phpc.tv and think the work you’re doing is amazing. Would you be open to sponsorship or to others helping out so you don’t shoulder costs and frustrations alone?
@turegjorup The reason I chose CF was because they had no egress fees (and they seemed to care about this community). But they said that I can't stream videos from it *if* I use the proxy, but also they don't allow R2 in prod *without* the proxy. So they accused me of ToS breach, gave me a catch 22 and stopped responding. Now I just hope I can find an alternative before they do something stupid (I'm also backing everything up because I have zero trust in their backup I pay for). @sarah
-
This support agent (Miguel) I'm talking to accused me of violating the ToS, gave me instructions that don't actually work, failed to respond to half on my messages, while still marking them as closed on each step. That's rude and stressful. Just when I thought that @cloudflare was actually good.
-
@thepanz @stefano I just want an affordable place to put a few terabytes of PeerTube videos and not wake up to surprise fees due to egress, or worse, having the whole thing deleted because some combination in my setup led me to accidentally breach a buried ToS clause. I swear this used to be easier 15 years ago.
-
@thepanz @stefano I just want an affordable place to put a few terabytes of PeerTube videos and not wake up to surprise fees due to egress, or worse, having the whole thing deleted because some combination in my setup led me to accidentally breach a buried ToS clause. I swear this used to be easier 15 years ago.
-
I thought I could finally enjoy a weekend, but the way phpc.tv uses @cloudflare is apparently against their ToS. So now I have to find out how to keep things running while remaining compliant, on a budget, on top of their having refused to raise the upload limit, which I also need to fix somehow. I guess this is why communities keep getting stuck with YouTube, Facebook and the likes. Unless you run everything out of your basement, there will always be someone threatening to pull the plug.
@afilina @cloudflare well, your basement does not scale. longterm we need some torrent based sollution for projects like this, to get rid of plugs. thanks for your work on this : ]
-
@thepanz @afilina Thank you for the kind words!
I'd personally use a (cheap) dedicated server for storage. No egress costs, no ingress costs and nobody telling you "you're holding it wrong".
Personally, I'm using cheap dedicated servers from OVH or Hetzner (Europe). OVH has some cheap servers and they, from time to time, offer them with huge discounts. Like the dedicated I'm using for the BSD Cafe and illumos Cafe media (and many other): 4x4Tb spinning drives, 64GB ram and 16 euros per month, if I'm not wrong. I've had this since 2021 and it rocks.Hetzner has the auctions, but is a little "strict" with new user accounts.
But yes, I agree. While I haven't had big problems with Cloudflare (but I don't use them that much, except for some things), the only way to be sure to serve is have your own data on your own devices. Unfortunately, I must say.
soon too
