Cloudflare CDN Partial Outage
cloudflarestatus.com
cloudflarestatus.com
There's no way it's DNS
It was DNS
Beautiful calligraphy, too.
Shopify admin pages and "some storefront images" were down for a few hours and I suspect its related to this cloudflare outtage.
On the webdev side—what can be done as extra defense-in-depth step to guard against this kind of issue? Unrelated to Cloudflare I feel like it is a common issue that crops up on even massive sites quite often. Is there some sort of secondary check / content decryption that could be required on the client-side to contain session cookie crossover?
What a tease. If only.
https://hostingchecker.com is a good resource to see where a website is hosted.
> Checking if the site connection is secure
> Enable JavaScript and cookies to continue
> blog.cloudflare.com needs to review the security of your connection before proceeding.
What does it mean to "review the security" of my connection?
Wouldn't that be my business? (Feel free to review the security of your connection by all means) :)
Why would that "need" running JavaScript here on my browser (which I don't for fairly obvious security reasons) Other websites seem to have no problem delivering basic content without that.
Also, no thank-you to cookies. We're not entering into a "session" relationship here, I merely wanted to read the document you advertised at the URL.
The measured number of browsers blocking JavaScript varies between about 0.7% and 4% with an estimated global average hovering around 1.5%. Here are some sources [1,2,3].
[1] https://www.cotsweb.com/blog/how-many-people-have-javascript...
[2] https://www.searchenginepeople.com/blog/stats-no-javascript....
[3] https://deliberatedigital.com/blockmetry/javascript-disabled
The reality of operating a big site/service on the internet in 2022 is that it’s sometimes necessary to use methods that annoy a few people (with very non-standard browser settings) in order to protect the service as a whole from a million bots trying to attack it at any given time.
This sounds like a very plausible argument. I've heard many of the arguments and don't dispute the threat model to something like Cloudflare.
And yet something about it still doesn't add up.
It turns power into a weakness.
How is it that much smaller sites - still able to serve something as simple as a plain-text blog to millions of users from a modest rack shack - operate perfectly well without any impediment?
Wouldn't an operation with all the power, might and money of Cloudflare be able to do a better job and still maintain the QoS (accessibility, interoperability etc) as Basement Bob with her Raspberry Pi?
Remember, all I want to do here is read a static web page of (I guess) less than 1000 words.
I'll take a punt: if "defending against millions of bots" is Cloudflare's business offering, then being able to serve a static site off a Raspberry Pi doesn't look good :)
--
Increased HTTP 530 Errors
Identified
The issue has been identified and a fix is being implemented.
Posted 1 hour ago. Oct 25, 2022 - 16:29 UTC
Investigating
Cloudflare is investigating an increased level of HTTP 530 errors.
We are working to analyse and mitigate this problem. More updates to follow shortly.
Posted 2 hours ago. Oct 25, 2022 - 15:53 UTC
This incident affects: Cloudflare Sites and Services (CDN/Cache).
> 530 Site is frozen
Curious what this means in Cloudflare land.
That's how Pantheon uses the code, not how Cloudflare uses it. The wikipedia article you linked has a whole section dedicated to Cloudflare's use of unofficial error codes.
Specifically, it doesn't mean much in particular for Cloudflare other than "check the other error code we returned elsewhere in the response to see what the actual issue is"