Hacker News Reader

Comment by aetherspawn | Hacker News Reader

Cloudflare are winning these days, they’re just lacking good fine grained permissions. You still have to make an entirely separate account for prod, which messes up SSO since one domain can only be bound to one account.

View on HN

Their products are cool and I've been happy with them over the years, but their blog right now has had some blunders recently. Also their reliability seems to have been having trouble but does seem better recently.

Will never use them without prepayment or spending limit options. Insane to be a bug, attack, or misclick away from 6-7 digit invoice

the CTO of Cloudflare (hn: dknecht) said:

> It is in the works. The billing team has been sprinting to fix a lot of debt in this area. I don’t have a date.

https://x.com/dok2001/status/2051220429973389622

Great thanks

Their pricing is not ridiculous like some providers. It would be very hard to rack up that kind of bill, especially considering their rate limiting rules are now free to use.

After years of AWS I gave Cloudflare a whirl and loved the UX but ultimately retreated back due to the same concern. They are so close though..

Yes! I just opened a support case today asking for more fine grained permissions.

Yep I made the switch a couple of years ago for all of my projects and never looked back. Workers, D1, R2, queues, containers, KV

Still using AWS for email sending so that will be great when it comes

E-mail sending is in beta afaik, you need the Workers paid plan to use it.

thank you!! missed the public launch

It already came if you use workers I believe, still in beta though. I would love to switch to it but I still need the SMTP interface though. https://developers.cloudflare.com/email-service/

wow thanks. I saw the initial announcement when it was still in private beta, but have been less online lately and missed the public launch. Awesome!!

This is exactly what stops me from using them for real work. I love their free tier for my hobby stuff.

Just let everyone have access to prod?

Poor access and change management governance.

hooboy that was a good one!

One account gets compromised and your doomed. A lot of companies even have prod access be a request based system. Most modern security models with zero trust don't let everyone have access to everything, quite the opposite.

Not sure what they are winning .. we kept them as a backup but they are so bad that they fail even there

Reply on news.ycombinator.com