如果你不需要,请勿将你的网站置于 Cloudflare 之后。
Do not put your site behind Cloudflare if you don't need to

原始链接: https://huijzer.xyz/posts/123/do-not-put-your-site-behind-cloudflare-if-you-dont

目前,一场大规模的 Cloudflare 中断正在影响众多网站,甚至包括流量较小的网站。这一事件凸显了依赖集中化服务的固有风险——它们制造了单一故障点。虽然许多人使用 Cloudflare 来防御 DDoS 攻击,但作者认为,对于流量较低的网站来说,这通常是不必要的,因为有针对性的攻击不太可能发生。 核心信息是呼吁更大的自力更生,并转向更加去中心化的网络。作者建议不要仅仅依赖 Cloudflare,而是通过像轮询 DNS、在单独的服务器上托管备份站点等技术来实现冗余。这种方法虽然需要更多努力,但可以提供更大的控制权和对第三方故障造成的停机事件的抵御能力。本质上,直接面对潜在的停机时间比容易受到集中化服务问题的困扰要好。

一个 Hacker News 的讨论围绕着是否使用 Cloudflare。发帖者认为,除非绝对必要,否则不应使用 Cloudflare,因为它引入了另一个潜在的故障点。 评论者对此观点进行了辩论。一些人同意,认为 Cloudflare 是一个庞大且可能存在问题的“内联网”,而不是开放互联网的一部分。另一些人则认为,依赖 Cloudflare 的基础设施——特别是 DDoS 保护和 CDN 服务——可以减轻网站所有者的责任,并且比独自处理中断更好。 一个关键点是,小型网站不太可能成为 DDoS 攻击的目标,但制定计划(例如预先配置 Cloudflare)是明智的。最终,这场讨论强调了在选择是否使用 Cloudflare 等服务时,控制权与便利性之间的权衡。
相关文章

原文

At the time of writing 12:43 UTC on Tue 18 Nov, Cloudflare has taken many sites down. I'm trying to browse the web, but about half of the sites show an error:

cloudflare.webp

Most of these sites are not even that big. I expect maybe a few thousand visitors per month.

This demonstrates again a simple fact: if you put your site behind a centralized service, then this service is a single point of failure. Even large established companies make mistakes and can go down.

Most people use Cloudflare because they have been scared into the idea that you need DDoS protection. Well, maybe you do, but probably you don't.

As they say in security, "no one will burn a zero day on you!". For your small blog with one hundred visitors per month, it's probably the same: "no one will burn their DDoS capabilities on you!"

I don't know how else to say it. Many people keep talking about the importance of a decentralized web, and then continue putting their site behind Cloudflare.

If you really want to be safe in case your server goes down, then setup a second version of your site at another location and point to that server via the A and AAAA records, see "round-robin DNS".

Maybe that's the core of this message. Face your fears. Put your service on the internet. Maybe it goes down, but at least not by yet another Cloudflare outage.

联系我们 contact @ memedata.com