Jump to content
Sign in to follow this  
ve3oat

Cloudflare - what advantages/disadvantages?

Recommended Posts

Moderator - please move this posting as you see fit. Not sure I have chosen the right place. Thanks.

 

What are the advantages and disadvantages of using Cloudflare?

 

They say they can speed up delivery of your content. That might be nice, but from my own point of view my website uses no scripts at all and I am happy to be able to do that (less vulnerability for my visitors). Using Cloudflare would of course require allowing their scipt(s) to run.

 

Are there any other considerations? Thanks for your opinions and guidance here.

... Martin

 

 

Share this post


Link to post
Share on other sites

JavaScript done properly is of no security concern to your visitors. A good proportion of the worlds largest websites and web-apps are largely or almost entirely built in JavaScript.

 

Cloudflare are a huge CDN used by many huge corporations again their security should be pretty water-tight.

Edited by rbrtsmith

Share this post


Link to post
Share on other sites

Hi, Web Guru, thanks for your comments. I am sure you are right about the security of Java scripts used by large corporations. My site, on the ohter hand, is small (I am a nobody) and I have intentionally avoided scripts so that my visitors (who don't know me) will feel more safe.

 

I see that among CloudFlare's other services, they reserve the right to install cookies on visitors' computers to track them. Lots of big companies do this, of course. Being small on the other hand, I have also avoided using cookies, in order to reassure my visitors of my lack of any hostile intent. "No scripts, no cookies, hey, this site must be safe" sort of thing.

 

I guess I need to know how most privacy- and security-conscious visitors feel about scripts and cookies from CloudFlare. What do you think of it?

 

... Martin

Share this post


Link to post
Share on other sites

As well as a CDN, CloudFlare offers DDOS protection, mitigation, firewalls, as well as threat detection. The threat detection is good, even on the free plan. We use it on every site at work, mainly to manage DNS. When you login, you can see all of the blocks IP's it has caught from known malicious users and you can increase the threat level if your site starts getting attacked. You will only get a lot of the DDOS benefits on the business plan and higher, but I've found the free one to have a lot of good features anyway.

 

The cookies are set for security reasons. There's more about how it works here.

Share this post


Link to post
Share on other sites

Thanks, Jack and BrowserBugs, I am beginning to feel more positive about the idea of using CloudFlare for my own website, despite their scripts and cookies. Maybe my idealism is giving way to practicality. ;-) Thanks very much for your comments and I think I am starting to see the future in this after all. Thanks too to rbrtsmith for helping to break the ice in my mind about CloudFlare.

... Martin

Share this post


Link to post
Share on other sites

 

That's why I've seen many clients with high brow names and big traffic invest in their service.

 

Yup, they're good at it too. Not many companies have the infrastructure and tools in place to handle DDOS and it's becoming a really common attack due to how easy it is.

 

The only thing to be cautious of is the caching service. If you're already running caching at the application level you can get some really weird behaviour. I tend to disable it.

Share this post


Link to post
Share on other sites

I'm considering using CloudFlare but I'm concerned having seen they've been breached recently.

 

I've also had problems in the past with my CloudFlare account being hacked, but I could probably improve on my own security for that.

 

Anyone using CloudFlare and happy with it?

Share this post


Link to post
Share on other sites

I'm considering using CloudFlare but I'm concerned having seen they've been breached recently.

 

I've also had problems in the past with my CloudFlare account being hacked, but I could probably improve on my own security for that.

 

Anyone using CloudFlare and happy with it?

 

Been very happy with it. We primarily launch our sites on Wordpress and in conjunction with Amazon S3 and Cloudflare we've had a lot less problems. In the past I was using MediaTemple to host and had endless hacks and malware running on sites. I've been able to use the page rules in Cloudflare to help mitigate bots and other things from gaining access.

 

Since the shift to Cloudflare, S3 and Digital Ocean not only has our problems fixing malware gone down but the speeds on our website have increased tremendously. I highly recommend it, I just use the free version for now but could see if sites grew large enough why one would invest in there services.

Edited by Sixo

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Sign in to follow this  

  • Recently Browsing

    No registered users viewing this page.

  • Member Statistics

    • Total Members
      57,553
    • Most Online
      4,970

    Newest Member
    Skilton06
    Joined
  • Forum Statistics

    • Total Topics
      65,740
    • Total Posts
      455,352
×