With the recent willingness of the US Government to pressure its tech agencies into revealing user data without a proper judicial warrant, we’ve decided it’s overdue for us migrate away from Cloudflare.

We’ll be transitioning our sites over to https://deflect.ca/ over the next week or so, starting with pixelfed first before doing lemmy and piefed.

I hope to be able to do this without any noticeable downtime, but it is a major config change that will require some backend changes as well. I’ll make an announcement before/after and you can always check https://status.fedecan.ca/

  • julian@activitypub.space
    10·
    2 days ago

    @[email protected] very cool, and nice recommendation with deflect…

    The pricing concerns me (especially since we using Cloudflare is a $0 cost)… At $10/5000 unique users, what if I get hit by a DDoS and my costs balloon?

    Anyway I suppose that’s a question for them, not you 😁

    • Shadow@lemmy.caOPMEnglish
      12·
      2 days ago

      It’s free for non profits, also our traffic is pretty minimal in the grand scheme of things.

      I can’t speak for your stuff though 😂

    • skisnow@lemmy.caEnglish
      11·
      2 days ago

      wait what? I thought like 99% of the point of edge services was to protect you from DDoS? I would hope that they wouldn’t bill you in cases like that.

    • Hazematman@lemmy.caEnglish
      9·
      2 days ago

      I thought that was strange to but here’s what they say on their website that makes it sound like you wont be charged for DDoS or bots

      How We Count unique IPs (UIP)

      The total number of unique IPs is tallied based on total number of legitimate individual IP addresses at the end of the calendar month. If a reader visits your website every day from the same IP address, that will equal 1 unique visitor for that calendar month, no matter how often they visit your website.

      Unique is fair

      Other providers might charge you based on website hits, website visits, megabytes of bandwidth, services offered and many other metrics. Some providers charge premiums during attacks. We opt for fair, consistent and predictable low-cost pricing that serves our clients fairly. Malicious bots or traffic generated during an attack are not something that you will pay for either, as these IPs will not be counted in your monthly pricing.

      • psycotica0@lemmy.caEnglish
        6·
        2 days ago

        This seems sensible, but does have some edges…

        Like, if I use my phone at home, and out and about on cell, and at work, and at my in-laws, and at the library, then that’s at least 5 “users” from one user as I change IPs.

        And if I’m on Tor, who knows how many users I count as, but definitely a lot more than 1.

        So I get what they’re trying to do… but I don’t think it’ll work out fairly…

        • Auli@lemmy.caEnglish
          1·
          11 hours ago

          And if I’m behind NAT everyone who is behind it counts as one.

        • Shadow@lemmy.caOPMEnglish
          5·
          2 days ago

          On the other hand with cgnat deployments being common on mobile devices and lower end isps, they would end up underreporting on those users.

          Overall it does seem tricky. Billing per legit request or mbit would make more sense to me.