this post was submitted on 18 Nov 2025
540 points (99.1% liked)
Technology
76917 readers
3623 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Aren't spikes in unusual traffic the exact thing Cloudflare is supposed to protect you from?
They protected the endpoints. They just weren't able to route traffic to them. Id bet it takes a MUCH larger ddos to bring cloudflare to its knees vs your average website.
From a Cloudflare customer's point of view, I don't care if my site is down from a DDOS or a Cloudflare outage, but the latter seems to happen more often.
As it stands? Cloudflare is still incredibly effective at protecting customers from those DDOS attacks. Which, depending on your hosting solution, can mean very noticeable monetary savings because YOUR hardware/connection didn't spike. And, regardless, can mean noticeable monetary savings as your engineers didn't need to recover a crashed system because your setup was just sitting there idle.
That said: If you truly need high availability? You need to do what downdetector did and have alternatives ready in the event that Cloudflare falls over. Same as with your ISP... which should be ISPs plural.
From another cloudflare customer, if our sites still work internally it's marginally better than them being broken both inside and outside the org as they would be if they were ddosed directly. I guess it depends on what kind of services you're running.