Hacker News Reader

Comment by andersa | Hacker News Reader

> We spoke to CloudFlare and were quoted a number we cannot reasonably achieve within our financial means

I don't get it. Cloudflare proudly advertises unmetered DDoS protection on any plan level. Is that just a lie, or what am I missing here? They don't need to be on a custom Enterprise plan.

View on HN

They are only doing unmetered DDoS for HTTP traffic - for websites. File storage etc. is not allowed. And git falls into that realm.

I see, that explains it.

To expand on that, Cloudflare's standard product is their HTTP reverse proxy. To proxy arbitrary TCP/UDP traffic, you need to use their Cloudflare Spectrum service (https://www.cloudflare.com/en-gb/application-services/produc...), which is metered.

I think they might be looking in something more similar to Magic Transit, but that depends on how they set up their infrastructure.

wow $1/GB?

would be cheaper to pay a developer to add websocket support to openssh

Unlimited free is almost always a lie.

See also "unlimited paid time off".

But in this case it literally is? Cloudflare provides unlimited HTTP traffic on all plans, exactly what they claim. Sourcehut needs a different service.

HTTP(S)-only _is_ the limit.

Yeah, because protecting other protocols would require a totally different approach and product. This isn't a conspiracy.

The Cloudflare HTTP CDN cannot protect SSH any more than a condom will make a good umbrella just because they both are designed for protection!

There is no chance of unlimited http even - otherwise startups would free ride that for their video sites etc

every / Netflix / porn site etc would use the unlimited free http traffic service if they could. I’d start a YouTube competitor. At some point if you use a lot of bandwidth you will get a call. So unlimited http traffic is a lie. Heck - my guess if you dumped a few petabytes into New Zealand or similar with high term costs you’d get a call

https://www.cloudflare.com/en-gb/plans/

Looks like level 3 ddos protection is only available on the enterprise plan, it's not included in the unmetered ddos protection.

Layer 3*

Reply on news.ycombinator.com