[Home](../README_short.md)

---

# CrimeFlarE
***Why you should say "No" to Cloudflare***


## Self-hosting
Self-hosting often works great, but it requires some effort to setup.
It is more aimed at technical people.

We might create a guide for some self-hosting basics which don't require Cloudflare.
[IPFS](https://ipfs.io/) may be worth consideration if performance is the main concern.

`Apache` is vulnerable to various low-bandwidth attacks. Use other server software such as [Caddy](https://caddyserver.com/), [lighttpd](https://www.lighttpd.net/) or [nginx](https://nginx.org/).


## Best way to protect your server from DDoS
- Avoid any service that _can intercept_ HTTP traffic (like Cloudflare)
- Install WAF on your loadbalancer.
  - Even simple [ModSecurity](https://www.modsecurity.org/) can save you.
- Add rate-limit to your nftable(firewall) and server software.
  - Just drop the excessive connection.



## Alternatives
| Alternative       | Drawback                          | Price | Link |
| ----------------- | --------------------------------- | ------ | ---- |
| Akamai | can be used to block Tor | ? | https://akamai.net/ |
| BunnyCDN | ? | $0.01+ | https://bunnycdn.com/ |
| Codeberg pages    | no custom domain support; tor hostility | Free | https://pages.codeberg.org/ |
| Gitee pages | must understand Chinese | Free | https://gitee.com/help/articles/4136 |
| Github pages      | uses Microsoft servers            | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) |
| Level 3 | ? | Enterprise | https://www.centurylink.com/ |
| PerimeterX        | not gratis                        | ? | - |
| Sharktech DDoS Solutions | ? | ? | https://sharktech.net/ |
| Surge.sh      | uses custom servers           | Free | https://surge.sh/ |
| Voxility | ? | ? | https://www.voxility.com/ |
| [eQualitie](https://equalit.ie/) | not gratis | gratis during COVID19 | https://equalit.ie/ |
| neoCities | static pages | Free | https://neocities.org/ |
| sucuri | not gratis; tor hostility at ~3.483% | $200+ | https://sucuri.net/|

## Not researched yet
### CDNJS
`CDNJS` is sponsored by Cloudflare. It might use it in the background.

## Why X is not included
| X       | Reason |
| ------- | ------ |
| Cloudflare Argo | Uses Cloudflare. |
| Gitlab pages      | GitLab is now Cloudflared |
| Imperva | Uses Cloudflare. |
| Netlify | Uses Amazon AWS which is also a content delivery network. It would be hypocritical to include it. |
| Siteground | Tor-hostile people. |
| jsDelivr | Uses Cloudflare, see their [network page](https://www.jsdelivr.com/network) |

## History
Sucuri and eQualitie have a history of CloudFlare patronage, but no longer.