zackbloom

The book "The Untethered Soul" is very good if you're ever interested in breaking free of that.

It's worth pointing out you can just point Cloudflare Load Balancing at two S3 buckets and call it a day.

It's also possible to do your token validation in something like Cloudflare Workers and store your blacklist in Workers KV. That would mean it lives all around the world closer to your users than your origin, making it unlikely it is adding meaningful latency to check it.

Disclaimer: I work at Cloudflare

Can anyone help me understand how having this data actually lowers insurance premiums? The same number of cars are being damaged by the same number of hailstorms with or without them.

Hello from Cloudflare! We're involved with CDNJS as we host the CDN-part of the project. We will support CDNJS and the sites which rely on it, period. If your site uses CDNJS you can trust it will continue to be fast and functional.

We have engineers currently working with the CDNJS team to get updates happening again. Once that is done we will start to think about the best way to keep CDNJS updating without requiring as much human intervention in the future. Thanks for your patience and feel free to ask any questions here.

Stratechery is another good choice.

> This part of the Bay is primarily industrial salt ponds.

For the record, the industrial salt ponds are actually very beautiful. The fact that they are salt ponds is not actually a refutation to the 'but you're destroying beauty' argument.

More specifically, pointing out someone else's stupidity is rarely welcome.

That doesn't seem right. Please submit an issue via the in-app feedback form and we'll get it fixed.

If you are hoping to mask your IP you should probably use a traditional VPN and not WARP. WARP doesn't compete with VPNs, it is for everyone who would or could never use a VPN.

This is incorrect. WARP is the VPN, WARP+ is a series of routing enhancements designed to improve performance. Sorry for the confusion, clearly we need to explain it better.

Hopefully I can! WARP uses a protocol called WireGuard to secure your Internet traffic. Your encrypted traffic flows over that protocol to the closest Cloudflare data center before it is released onto the public Internet.

WARP+ takes that one step further. Rather than releasing your traffic directly onto the Internet, we use all the data we have from our Argo product [1] to route your traffic to _another_ Cloudflare data center via the route over the Internet with the best possible performance. That data center will be closer to your traffic's destination, hopefully improving the performance. In effect your traffic will bypass Internet congestion and slow links with the goal of better time-to-first-byte performance.

1- https://www.cloudflare.com/products/argo-smart-routing/

We're working our way through the waitlist now, hoping to get to everyone today. If you have an up-to-date version of the 1.1.1.1 app running you'll get a push notification when we are ready for you to opt-into WARP.

Please be sure to file a bug report in the app if you can. Every report helps us fix issues and make WARP better.

Yes, we are running through the waitlist now. Our hope is to get everyone activated today.

Great eye! We haven't figured out how to expose them yet for sites not using Cloudflare. We do have some experience solving this problem for Spectrum [1] we're hoping to lean on. The most important thing to us is users don't expect us to keep their IP private, as that is not the intent of WARP.

1- https://blog.cloudflare.com/mmproxy-creative-way-of-preservi...

Workers are pretty significantly different. They don't have a meaningful cold-start time, for one.

I adore dining cars. There is something SO COOL about a self-contained restaurant which takes in power, water, and ingredients in one side and delivers fed people out the other. For people who don't know the first floor of these cars is generally a kitchen, the second a dining room where folks order (ordered) off a menu and were served food by a waiter. They've been a part of American trains since at least the mid-1880s, but no longer...

You are probably talking about a Cafe Car, not a Dining Car. A dining car is (was) a fully self-contained restaurant. This move is essentially replacing that with your stale bagel vendor.

You can also do this on the same network which runs 1.1.1.1. Cloudflare (where I work) allows you to deploy your own serverless functions for free [1] on the same machines which serve DNS traffic, and the Workers can query https://cloudflare-dns.com without a problem.

1- https://workers.cloudflare.com/

The Cloudflare client, cloudflared, works similarly but with less overhead. An encrypted HTTP/2 tunnel is being created from your machine to the Internet.

I believe Cloudflare supports it and it's free.

There are a lot of people in this thread putting down the idea of an autonomous plane, but frankly, as a pilot it is a much easier environment to automate than driving.

In the world of instrument flying there is very little to hit which isn't clearly charted, you have an external navigator to keep you clear of most other planes (Air Traffic Control), and the landing environment is kept very normalized by the hard work of the FAA. This is orders of magnitude simpler to pull off than self driving cars, and it might save the General Aviation industry.

Cloudflare | Hiring in Austin, SF, London | Onsite, Full-time

I work on the Product Strategy team at Cloudflare in Austin where we build things like 1.1.1.1 [1], new distributed storage systems for our Workers serverless compute platform [2], and our Registrar [3]. If you're an engineer looking to build hard and interesting things in an environment with a lot of ownership and ethics I'm happy to connect you with the right people: zack at cloudflare.com

1- https://1.1.1.1/

2- https://workers.cloudflare.com/

3- https://blog.cloudflare.com/cloudflare-registrar/

In addition to what @jgrahamc said, another good option for some services is to use a Cloudflare Argo Tunnel. Spin it up on your local machine, and web traffic will be routed to it without having to open your firewall, DMZ, etc. It also has a free tier now: https://blog.cloudflare.com/a-free-argo-tunnel-for-your-next...

Lighterweight virtualization can make it affordable to have many more, smaller, data centers, allowing a presence in Africa. If you write a Cloudflare Worker [1] it can be executed in any of our 11 PoPs there [2].

1- https://workers.cloudflare.com/

2- https://www.cloudflare.com/network/

There are various mechanisms like this in place to make Workers an unattractive way to launch an attack. tadeusz_wojcik also emailed us, and we were able to raise the limit for them (and anyone else who asks!).

Another method is to limit access to timing mechanisms: https://www.infoq.com/presentations/cloudflare-v8

We do have a product called SSL for SaaS which handles most of the components of that flow like DNS and TLS certificates. The actual domain registration will take a bit longer to integrate, but I'm guessing you could make it work using our API.

To tag onto what JGC said, you have complete programmatic access to the Cloudflare cache inside a Worker [1] using the Cache API [2]. If there's anything VCL can do which Worker's can't we would love to hear about it. We also support Terraform for all of our APIs if your goal is to have a config language to configure Cloudflare settings.

1- https://developers.cloudflare.com/workers/about/

2- https://blog.cloudflare.com/introducing-the-workers-cache-ap...