PR 26
This commit is contained in:
resistance
commit
620d25bcaa
Binary file not shown.
|
|
@ -12,7 +12,7 @@
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Are you already aware of the problems of Cloudflare?
|
Are you already aware of the problems of [Cloudflare](https://www.cloudflare.com/)?
|
||||||
|
|
||||||
You might want to check:
|
You might want to check:
|
||||||
- [Alternatives](#alternatives)
|
- [Alternatives](#alternatives)
|
||||||
|
|
@ -22,17 +22,17 @@ You might want to check:
|
||||||
|
|
||||||
## Who are we?
|
## Who are we?
|
||||||
|
|
||||||
`CrimeFlarE` is a group of volunteer Tor, privacy and net neutrality
|
`CrimeFlarE`(CFE) is a group of volunteer [Tor](https://www.torproject.org/), privacy and net neutrality
|
||||||
enthusiasts working to counter CloudFlare’s oppressive attack on the Tor
|
enthusiasts working to counter CloudFlare’s oppressive attack on the Tor
|
||||||
community and reduce the harms CloudFlare brings to all users (Tor users and
|
community and reduce the harms CloudFlare brings to all users (Tor users and
|
||||||
clearnet users).
|
clearnet users).
|
||||||
|
|
||||||
## Who is Cloudflare?
|
## Who is Cloudflare?
|
||||||
|
|
||||||
Cloudflare is the world's largest man-in-the-middle proxy. Technically it is called "reverse proxy".
|
Cloudflare is the world's largest man-in-the-middle proxy. Technically it is called "[reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)".
|
||||||
This means that it sits between you and the server which sent you webpages and images.
|
This means that it sits between you and the server which sent you webpages and images.
|
||||||
|
|
||||||
Cloudflare is a content delivery network, which means that it has different
|
Cloudflare is a [content delivery network](https://en.wikipedia.org/wiki/Content_delivery_network), which means that it has different
|
||||||
servers in different locations, so that websites are supposed to be better
|
servers in different locations, so that websites are supposed to be better
|
||||||
reachable. This has some bad sides.
|
reachable. This has some bad sides.
|
||||||
|
|
||||||
|
|
@ -68,7 +68,7 @@ Read more about the [reCAPTCHA problem](../subfiles/recaptcha-problem.md).
|
||||||
|
|
||||||
#### Project Honey Pot
|
#### Project Honey Pot
|
||||||
|
|
||||||
"Project Honey Pot" is a project which collects a lot of personal data
|
"[Project Honey Pot](https://www.projecthoneypot.org/)" is a project which collects a lot of personal data
|
||||||
and much of that data is from innocent people who deserve privacy.
|
and much of that data is from innocent people who deserve privacy.
|
||||||
Cloudflare was created by people who worked on that project. US DHS showed interest to this project.
|
Cloudflare was created by people who worked on that project. US DHS showed interest to this project.
|
||||||
|
|
||||||
|
|
@ -81,13 +81,17 @@ Cloudflare is not convenient for many visitors of your site.
|
||||||
You will lose visitors when you choose Cloudflare.
|
You will lose visitors when you choose Cloudflare.
|
||||||
Many people who helped writing this file even blocked by Cloudflare.
|
Many people who helped writing this file even blocked by Cloudflare.
|
||||||
|
|
||||||
Did you know that you can lose visitors because your site doesn't load in a few seconds?
|
Did you know that you can lose visitors because your site [doesn't load in a few seconds](https://www.hostingmanual.net/3-seconds-how-website-speed-impacts-visitors-sales/)?
|
||||||
|
|
||||||
Cloudflare often makes visitors wait for more than few seconds.
|
Cloudflare often makes visitors wait for more than few seconds.
|
||||||
Many visitors will just leave your site when they see this.
|
Many visitors will just leave your site when they see this.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
No one wants to click multiple images just to read your website.
|
||||||
|
|
||||||
|
Here is an [example video](../subfiles/cloudflare-video-01.md) of CloudFlare blocking user who is using privacy add-ons.
|
||||||
|
|
||||||
|
|
||||||
### Other problems
|
### Other problems
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -7,39 +7,54 @@
|
||||||
|
|
||||||
|
|
||||||
## Self-hosting
|
## Self-hosting
|
||||||
Self-hosting often works great, but it requires some effort to setup. It is
|
Self-hosting often works great, but it requires some effort to setup.
|
||||||
more aimed at technical people.
|
It is more aimed at technical people.
|
||||||
|
|
||||||
We might create a guide for some self-hosting basics which don't require Cloudflare.
|
We might create a guide for some self-hosting basics which don't require Cloudflare.
|
||||||
[IPFS](https://ipfs.io/) may be worth consideration if performance is the main concern.
|
[IPFS](https://ipfs.io/) may be worth consideration if performance is the main concern.
|
||||||
|
|
||||||
|
`Apache` is vulnerable to various low-bandwidth attacks. Use other server software such as [Caddy](https://caddyserver.com/), [lighttpd](https://www.lighttpd.net/) or [nginx](https://nginx.org/).
|
||||||
|
|
||||||
|
|
||||||
|
## Best way to protect your server from DDoS
|
||||||
|
- Avoid any third-party service that _can intercept_ HTTP traffic (like Cloudflare)
|
||||||
|
- Install WAF on your loadbalancer.
|
||||||
|
- Even simple [ModSecurity](https://www.modsecurity.org/) can save you.
|
||||||
|
- Add rate-limit to your nftable(firewall) and server software.
|
||||||
|
- Just drop the excessive connection.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Alternatives
|
## Alternatives
|
||||||
| Alternative | Drawback | Price | Link |
|
| Alternative | Drawback | Price | Link |
|
||||||
| ----------------- | --------------------------------- | ------ | ---- |
|
| ----------------- | --------------------------------- | ------ | ---- |
|
||||||
|
| Akamai | can be used to block Tor | ? | https://akamai.net/ |
|
||||||
|
| BunnyCDN | ? | $0.01+ | https://bunnycdn.com/ |
|
||||||
| Codeberg pages | no custom domain support; tor hostility | Free | https://pages.codeberg.org/ |
|
| Codeberg pages | no custom domain support; tor hostility | Free | https://pages.codeberg.org/ |
|
||||||
| [eQualitie](https://equalit.ie/) | not gratis | gratis during COVID19 | https://equalit.ie/ |
|
| Gitee pages | must understand Chinese | Free | https://gitee.com/help/articles/4136 |
|
||||||
| Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) |
|
| Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) |
|
||||||
|
| Level 3 | ? | Enterprise | https://www.centurylink.com/ |
|
||||||
| PerimeterX | not gratis | ? | - |
|
| PerimeterX | not gratis | ? | - |
|
||||||
| [sucuri](https://sucuri.net) | not gratis; tor hostility at ~3.483% | $200+ | https://sucuri.net/|
|
| Sharktech DDoS Solutions | ? | ? | https://sharktech.net/ |
|
||||||
| Surge.sh | uses custom servers | Free | https://surge.sh/ |
|
| Surge.sh | uses custom servers | Free | https://surge.sh/ |
|
||||||
|
| Voxility | ? | ? | https://www.voxility.com/ |
|
||||||
|
| [eQualitie](https://equalit.ie/) | not gratis | gratis during COVID19 | https://equalit.ie/ |
|
||||||
|
| neoCities | static pages | Free | https://neocities.org/ |
|
||||||
|
| sucuri | not gratis; tor hostility at ~3.483% | $200+ | https://sucuri.net/|
|
||||||
|
|
||||||
## Not researched yet
|
## Not researched yet
|
||||||
### CDNJS
|
### CDNJS
|
||||||
CDNJS is sponsored by Cloudflare. It might use it in the background.
|
`CDNJS` is sponsored by Cloudflare. It might use it in the background.
|
||||||
|
|
||||||
## Why X is not included
|
## Why X is not included
|
||||||
| X | Reason |
|
| X | Reason |
|
||||||
| ------- | ------ |
|
| ------- | ------ |
|
||||||
|
| Cloudflare Argo | Uses Cloudflare. |
|
||||||
| Gitlab pages | GitLab is now Cloudflared |
|
| Gitlab pages | GitLab is now Cloudflared |
|
||||||
| Imperva | Uses Cloudflare. |
|
| Imperva | Uses Cloudflare. |
|
||||||
| jsDelivr | Uses Cloudflare, see their [network page](https://www.jsdelivr.com/network) |
|
|
||||||
| Netlify | Uses Amazon AWS which is also a content delivery network. It would be hypocritical to include it. |
|
| Netlify | Uses Amazon AWS which is also a content delivery network. It would be hypocritical to include it. |
|
||||||
| Siteground | Tor-hostile people. |
|
| Siteground | Tor-hostile people. |
|
||||||
|
| jsDelivr | Uses Cloudflare, see their [network page](https://www.jsdelivr.com/network) |
|
||||||
|
|
||||||
## History
|
## History
|
||||||
Sucuri and eQualitie have a history of CloudFlare patronage, but no longer.
|
Sucuri and eQualitie have a history of CloudFlare patronage, but no longer.
|
||||||
|
|
||||||
|
|
||||||
[//]: # ( go.impv is CF. | [Imperva](https://www.imperva.com) | not gratis; tor hostility at ~3.411% | ? | https://www.imperva.com |)
|
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1 @@
|
||||||
|
<iframe width="480" height="390" src="https://codeberg.org/crimeflare/cloudflare-tor/raw/branch/master/image/cloudflare_withprivaon.mp4" frameborder="0" allowfullscreen></iframe>
|
||||||
Loading…
Reference in New Issue