Ask GAE Devs: CloudFlare reviews?
365 views
Skip to first unread message
HOCINE BENFERHAT
Dec 28, 2012, 8:11:30 PM12/28/12
to google-a...@googlegroups.com
Looking at using CloudFlare, is the free plan worth the extra hops for your dynamic content?
Jeff Schnitzer
Dec 29, 2012, 11:49:34 AM12/29/12
to Google App Engine
We use it for Voost (https://www.voo.st/). Other than one time when
GAE basically blocked all of cloudflare (you can search this list for
the story), we're happy with it. In theory, CF is now whitelisted by
Google so that can't happen again.
SSL is cheaper than Google's offering and the extra statistics are
useful. I can't tell a difference performance-wise, but I haven't
tried any quantitative measurements.
I like their DNS management system, so much so that I have migrated
DNS for all my domains to CF even though most do not use the reverse
proxy. You can do this, in which case packet routing is "as normal",
and then only enable the proxy with a buttonclick if you are getting
attacked. So there doesn't seem to be any downside to setting up the
system; whether you choose to turn the proxy on or not is a separate
decision.
Disclosure: CF's head of engineering is a cycling buddy of my biz
partner, but otherwise we're a paying customer like everyone else.
Jeff
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/OWmpNd1BWE0J.
> To post to this group, send email to google-a...@googlegroups.com.
> To unsubscribe from this group, send email to
> google-appengi...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/google-appengine?hl=en.
GAE basically blocked all of cloudflare (you can search this list for
the story), we're happy with it. In theory, CF is now whitelisted by
Google so that can't happen again.
SSL is cheaper than Google's offering and the extra statistics are
useful. I can't tell a difference performance-wise, but I haven't
tried any quantitative measurements.
I like their DNS management system, so much so that I have migrated
DNS for all my domains to CF even though most do not use the reverse
proxy. You can do this, in which case packet routing is "as normal",
and then only enable the proxy with a buttonclick if you are getting
attacked. So there doesn't seem to be any downside to setting up the
system; whether you choose to turn the proxy on or not is a separate
decision.
Disclosure: CF's head of engineering is a cycling buddy of my biz
partner, but otherwise we're a paying customer like everyone else.
Jeff
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/OWmpNd1BWE0J.
> To post to this group, send email to google-a...@googlegroups.com.
> To unsubscribe from this group, send email to
> google-appengi...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/google-appengine?hl=en.
Kaan Soral
Dec 29, 2012, 3:38:43 PM12/29/12
to google-a...@googlegroups.com
Why I want to use CloudFlare:
It can block non-search-engine scrappers, maybe malicious people trying to download content for malicious use. (I assume CF can do this)
Why I'm afraid to use CloudFlare:
I sometimes get identified as a false malicious user myself, there were 1-2 times in the past when I couldn't enter a site with CF on, maybe at that time someone from my country was attacking that site, who knows, but still this is unacceptable.
Other features such as SSL etc are solvable otherwise, but blocking malicious behavior is an extreme challenge itself, so If I were to use CF, I would use it only for this feature.
Any comments on these points?
It can block non-search-engine scrappers, maybe malicious people trying to download content for malicious use. (I assume CF can do this)
Why I'm afraid to use CloudFlare:
I sometimes get identified as a false malicious user myself, there were 1-2 times in the past when I couldn't enter a site with CF on, maybe at that time someone from my country was attacking that site, who knows, but still this is unacceptable.
Other features such as SSL etc are solvable otherwise, but blocking malicious behavior is an extreme challenge itself, so If I were to use CF, I would use it only for this feature.
Any comments on these points?
Kaan Soral
Dec 30, 2012, 2:42:22 PM12/30/12
to google-a...@googlegroups.com
Thanks a lot for the suggestion,
It certainly is interesting, I will dive deeper into the article as soon as possible
On Sunday, December 30, 2012 3:28:10 PM UTC+2, HaimS wrote:
It certainly is interesting, I will dive deeper into the article as soon as possible
On Sunday, December 30, 2012 3:28:10 PM UTC+2, HaimS wrote:
Kaan you should try Incapsula ]http://www.incapsula.com/]
Works like Cloudflare but offers much better security & no false positive identification.
Also, only 9$ for SSL support instead of 20$..
I switched after reading this review [http://www.ehackingnews.com/2012/11/incapsula-vs-cloudflare-security-review.html] and been very happy ever since.
בתאריך יום שבת, 29 בדצמבר 2012 20:38:43 UTC, מאת Kaan Soral:
Reply all
Reply to author
Forward
0 new messages