undefined | Better HN

0 pointsserentty4y ago0 comments

If you come back tomorrow, I can probably turn CloudFlare off. Although I understand not being enthusiastic enough about my novelty website to bother.

0 comments

15 comments · 2 top-level

rkagerer4y ago· 8 in thread

Are there any tricks a user can do to bypass Cloudflare or force a cache invalidation?

arjvik4y ago

That would entirely defeat the purpose of cloudflare's DDoS protections.

serenttyOP4y ago

Yeah, I imagine it would. I can invalidate the cache myself, but it would not make sense for a user to do so.

zhfliz4y ago

generally, adding random query params like ?1, ?2, ?12345 helps with the default settings of including that in the cache key.

that will also work in this instance.

you won't however see it slowly send the response as you do on http://trombone.zapto.org/, as cloudflare seems to block until it received the full response from the backend.

freedomben4y ago

You're not wrong, but all of that behavior is configurable so may work on some sites and not others. The account owner can tell cloudflare whether to consider query params different or the same for cache hit puproses. You can also configure whether cloudflare streams/buffers (although some of it does require the enterprise plan).

No affiliation with cloudflare other than I use them for several sites.

1 more reply

serenttyOP4y ago

If you want to visit the page directly without CloudFlare, go to http://trombone.zapto.org instead.

rkagerer4y ago

Nice! Thanks for serving me. It was snappier than expected.

jesprenj4y ago

Somehow getting the IP address of the server (in this case 174...*) would enable you to connect directly. Websites, such as crimeflare.org crawled the net to gather those addresses, probably by scanning, but the mentioned site was shut down as it seems.

hunter2_4y ago

A site that really wants Cloudflare's protection would ignore all traffic that doesn't come from Cloudflare though. In practice, many origins probably aren't locked down in this fashion.

nonrandomstring4y ago· 5 in thread

Please for the love of kittens turn off Cloudflare and never put it on again. For me and other Tor users that awful service is a guaranteed way of ensuring we'll never see your site (which I am very interested in BTW).

serenttyOP4y ago

Yeah, sorry about that. I am planning on finding a way to keep things interesting and authentic with the hosting, but also accessible to everyone.

In the meantime, if you want to visit the page directly without CloudFlare, go to http://trombone.zapto.org instead.

nonrandomstring4y ago

I use a text based browser from my editor and that loads as close to instantly as you'd ever hope for! A VIC-20 version sounds even more awesome.

1 more reply

hsbauauvhabzb4y ago

Turning cloudflare off has DoS implications for a sanely hosted side, let alone a 386. You turning off tor when required would be a better option.

I hope you don’t regularly make such selfish requests to potential DoS victims due to your own arrogance / ignorance.

serenttyOP4y ago

I’m dumb enough to do it anyway. ;)

nonrandomstring4y ago

Extra points for being able to insult both the OP and myself in one sentence. If you've nothing constructive to add how about you leave us insane, ignorant and arrogant grown-ups in peace to work out our own stuff?

1 more reply

j / k navigate · click thread line to collapse

0 comments

15 comments · 2 top-level

rkagerer4y ago· 8 in thread

Are there any tricks a user can do to bypass Cloudflare or force a cache invalidation?

arjvik4y ago

That would entirely defeat the purpose of cloudflare's DDoS protections.

serenttyOP4y ago

Yeah, I imagine it would. I can invalidate the cache myself, but it would not make sense for a user to do so.

zhfliz4y ago

generally, adding random query params like ?1, ?2, ?12345 helps with the default settings of including that in the cache key.

that will also work in this instance.

you won't however see it slowly send the response as you do on http://trombone.zapto.org/, as cloudflare seems to block until it received the full response from the backend.

freedomben4y ago

No affiliation with cloudflare other than I use them for several sites.

1 more reply

serenttyOP4y ago

If you want to visit the page directly without CloudFlare, go to http://trombone.zapto.org instead.

rkagerer4y ago

Nice! Thanks for serving me. It was snappier than expected.

jesprenj4y ago

hunter2_4y ago

A site that really wants Cloudflare's protection would ignore all traffic that doesn't come from Cloudflare though. In practice, many origins probably aren't locked down in this fashion.

nonrandomstring4y ago· 5 in thread

serenttyOP4y ago

Yeah, sorry about that. I am planning on finding a way to keep things interesting and authentic with the hosting, but also accessible to everyone.

In the meantime, if you want to visit the page directly without CloudFlare, go to http://trombone.zapto.org instead.

nonrandomstring4y ago

I use a text based browser from my editor and that loads as close to instantly as you'd ever hope for! A VIC-20 version sounds even more awesome.

1 more reply

hsbauauvhabzb4y ago

Turning cloudflare off has DoS implications for a sanely hosted side, let alone a 386. You turning off tor when required would be a better option.

I hope you don’t regularly make such selfish requests to potential DoS victims due to your own arrogance / ignorance.

serenttyOP4y ago

I’m dumb enough to do it anyway. ;)

nonrandomstring4y ago

1 more reply

j / k navigate · click thread line to collapse