Hacker News Reader

Comment by Alupis | Hacker News Reader

If you need (or more likely, think you need) custom stuff that doesn't fit into the one-size-fits-all tiers Cloudflare has available on their signup page.

Like... if you can just go there and self-signup and move your DNS, etc... then you're going to be just fine in their standard plans.

There's a lot of big-orgs that think they need special stuff when they in fact do not.

> "we called [Cloudflare] and they quoted a very big number"

Why did they think they needed to even call Cloudflare or speak with a sales person at all? That was the first mis-step... their Business Plan ($200 monthly) says "unmetered DDoS Protection"...

View on HN

git over ssh or an email interface are both core sourcehut features that seem like they wouldn't fit into cloudflare's standard https only model

That's a fair point.

I think specifically for Sourcehut, to survive the DDoS they likely don't need 100% feature parity. Right now you can't even load their webpage - the service is effectively entirely down and users are left guessing what's going on. Getting web services back online would be significant.

The point for them would be to get breathing room to figure out a better long term plan. When the immediacy is gone, they'll be in a much better negotiating position with Cloudflare (or alternatives) for non-standard features.

Expanding on GP a bit, ssh is not just a core feature for SourceHut the _only_ allowed method of write access to a repository[0].

sr.ht does not support pushing to git repositories over HTTPS with a username+password — SSH keys are mandatory.

HTTP access is restricted to read-only operations (clone, pull, etc).

[0] https://web.archive.org/web/20231225152845/https://man.sr.ht...

That was understood. The point I was attempting to make was a partial outage is better than a complete outage. Restoring web services would allow them to better communicate to their customers what was happening... instead of everything just vanishing from the internet.

It appears they restored HTTP services now, so perhaps they ended up taking that route. Their homepage lists details of the ongoing attack/outage and their current efforts. This is what should have been done immediately, I'm afraid to say.

Once the attack passes, they will then be in a better position to consider their options and negotiate with providers for long term solutions.

Cloudflare Spectrum (https://www.cloudflare.com/application-services/products/clo... - available pay-as-you-go by the GB for SSH and Minecraft) could handle git over SSH without an enterprise account. Email would probably require either Email Workers or an enterprise Spectrum plan though.

Reply on news.ycombinator.com