devol
/
Come-funziona-Cloudflare
mirror of https://codeberg.org/arh/how-cloudflare-works
1
0
Fork 0
Code Issues Releases Wiki Activity
Come-funziona-Cloudflare/README_en.md

24 KiB
Raw Blame History

👋 Non-English versions

The Great Cloudwall

Stop Cloudflare

🖹 🖼
"The Great Cloudwall" is Cloudflare Inc., the U.S. company. It is providing CDN(content delivery network) services, DDoS mitigation, Internet security, and distributed DNS(domain name server) services.
Cloudflare is the world's largest MITM proxy(reverse proxy). Cloudflare owns more than 80% of CDN market share and the number of cloudflare users are growing each day. They have expanded their network to more than 100 countries. Cloudflare serves more web traffic than Twitter, Amazon, Apple, Instagram, Bing & Wikipedia combined. Cloudflare is offering free plan and many people are using it instead of configuring their servers properly. They traded privacy over convenience.
Cloudflare sits between you and origin webserver, acting like a border patrol agent. You are not able to connect to your chosen destination. You are connecting to Cloudflare and all your information is being decrypted and handed over on the fly.
The origin webserver administrator allowed the agent - Cloudflare - to decide who can access to their "web property" and define "restricted area".
Take a look at the right image. You will think Cloudflare block only bad guys. You will think Cloudflare is always online(never go down). You will think legit bots and crawlers can index your website.
However those are not true at all. Cloudflare is blocking innocent people with no reason. Cloudflare can go down. Cloudflare blocks legit bots.
Just like any hosting service, Cloudflare is not perfect. You will see this screen even if the origin server is working well.
Do you really think Cloudflare has 100% uptime? You have no idea how many times Cloudflare goes down. If Cloudflare goes down your customer cannot access your website.
It is called this in reference to the Great Firewall of China which does a comparable job of filtering out many humans from seeing web content (ie everyone in mainland China and people outside) while at the same time those not affected to see a dratically different web, a web free of censorship such as an image of "tank man" and the history of "Tiananmen Square protests".
Cloudflare possesses great power. In a sense, they control what the end user ultimately sees. You are prevented from browsing the website because of Cloudflare.
Cloudflare can be used for censorship.
You cannot view cloudflared website if you are using minor browser which Cloudflare may think it is a bot(because not many people use it).
You cannot pass this invasive "browser check" without enabling Javascript. This is a waste of five(or more) seconds of your valuable life.
Cloudflare also automatically block legit robots/crawlers such as Google, Yandex, Yacy, and API clients. Cloudflare is actively monitoring "bypass cloudflare" community with an intent to break legit research bots.
Cloudflare similarly prevents many people who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT or sharing same IP, for example public Wifi) unless they solve multiple image CAPTCHAs. In some cases, this will take 10 to 30 minutes to satisfy Google.
In the year 2020 Cloudflare switched from Google's Recaptcha to hCaptcha as Google intends to charge for its use. Cloudflare told you they care your privacy("it helps address a privacy concern") but this is obviously a lie. It is all about money. "hCaptcha allows websites to make money serving this demand while blocking bots and other forms of abuse"
From user's perspective, this doesn't change much. You are being forced to solve it.
Many humans and software are being blocked by Cloudflare every day.
Cloudflare annoys many people around the world. Take a look at the list and think whether adopting Cloudflare on your site is good for user experience.
What is the purpose of the internet if you cannot do what you want? Most people who visit your website will just look for other pages if they can't load a webpage. You may be not blocking any visitors, but Cloudflare's default firewall is strict enough to block many people.
There is no way to solve the captcha without enabling Javascript and Cookies. Cloudflare is using them to make a browser signature to identify you. Cloudflare needs to know your identity to decide whether you are eligeble to continue browsing the site.
Tor users and VPN users are also a victim of Cloudflare. Both solutions are being used by many people who cannot afford uncensored internet due to their country/corporation/network policy or who wants to add extra layer to protect their privacy. Cloudflare is shamelessly attacking those people, forcing them to turn off their proxy solution.
If you didn't try Tor until this moment, we encourage you to download Tor Browser and visit your favorite websites. (advice: Do not login to your bank website or government webpage or they will flag your account. Use VPN for those websites.)
You might want to say "Tor is illegal! Tor users are criminal! Tor is bad!". No. You might learned about Tor from television, saying Tor can be used to browse darknet and trade guns, drugs or chid porn. While above statement is true that there are many market website where you can buy such items, those sites are often appear on clearnet too.
Tor was developed by US Army, but current Tor is developed by the Tor project. There are many people and organizations who use Tor including your future friends. So, if you are using Cloudflare on your website you are blocking real humans. You will lose potential friendship and business deal.
And their DNS service, 1.1.1.1, is also filtering out users from visiting the website by returning fake IP address owned by Cloudflare, localhost IP such as "127.0.0.x", or just return nothing.
Cloudflare DNS also break online software from smartphone app to computer game because of their fake DNS answer. Cloudflare DNS cannot query some bank websites.
And here you might think,
"I am not using Tor or VPN, why should I care?"
"I trust Cloudflare marketing, why should I care"
"My website is https why should I care"
If you visit website which use Cloudflare, you are sharing your information not only to website owner but also Cloudflare. This is how the reverse proxy works.
It is impossible to analyze without decrypting TLS traffic.
Cloudflare knows all your data such as raw password.
Cloudbeed can happen anytime.
Cloudflare's https is never end-to-end.
Do you really want to share your data with Cloudflare, and also 3-letter agency?
Internet user's online profile is a "product" that the government and big tech companies wants to buy.
U.S. Department of Homeland Security said:

"Do you have any idea how valuable the data you have is? Is there any way you would sell us that data?"
Cloudflare also offer FREE VPN service called "Cloudflare Warp". If you use it, all your smartphone (or your computer) connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving all your information to Cloudflare. If you think "Are you joking? Cloudflare is secure." then you need to learn how VPN works.
Cloudflare said their VPN service make your internet fast. But VPN make your internet connection slower than your existing connection.
You might already know about the PRISM scandal. It is true that AT&T lets NSA to copy all internet data for surveillance.
Let's say you're working at the NSA, and you want every citizen's internet profile. You know most of them are blindly trusting Cloudflare and using it - only one centralized gateway - to proxy their company server connection(SSH/RDP), personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, shopping, video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("1.1.1.1") and VPN service ("Cloudflare Warp") for "Secure! Faster! Better!" internet experience. Combining them with user's IP address, browser fingerprint, cookies and RAY-ID will be useful to build target's online profile.
You want their data. What will you do?

Cloudflare is a honeypot.

Free honey for everyone. Some strings attached.

Do not use Cloudflare.

Decentralize the internet.

"Cloudflare is not an option."

Please continue to next page: "Cloudflare Ethics"

_click me_

Data & More Information

This repository is a list of websites that are behind "The Great Cloudwall", blocking Tor users and other CDNs.

Data

More Information

_click me_

What can you do?

About fake accounts

Crimeflare know about the existence of fake accounts impersonating our official channels, be it Twitter, Facebook, Patreon, OpenCollective, Villages etc. We never ask your email. We never ask your name. We never ask your identity. We never ask your location. We never ask your donation. We never ask your review. We never ask you to follow on social media. We never ask your social media.

DO NOT TRUST FAKE ACCOUNTS.