[Migo]

Got this from a buddy of mines' thread on another forum and I thought it was a really good video.



Here is also a blog post about the security concerns using CloudFlare. Couldn't put it into this thread because it would be super long - but seriously guys check it out. Really good info here. Practically everyone I know with a forum uses CloudFlare.

https://unredacted.org/security-privacy/...-concerns/

[Pirate]

lmao Cloudflare is useless.
Its easy to block ddos attacks if you know what you are doing

[Migo]

lmao Cloudflare is useless.
Its easy to block ddos attacks if you know what you are doing

Yeah CloudFlare is a bitch.
Like you said, it's really easy to block DDoS attacks if you know what you're doing.

I can see if someone is using a shared server and needs free DDoS protection but if you have a Dedi / VPS then you have to change the game yourself.

[JohnDoe_mybb_import19125]

Good video.
Cloudflare sucks unless you decide to pay.. what now 2000$ or something for BGP network protection? Not a feasable option. If anyone has trouble resolving a CF site, let me know. I have private tools which can resolve most of them, probably except of course BGP. Same goes for other providers too, using DNS based mitigation is not a good idea. DNS was not designed for that.

Related, there's also ways to mitigate and stop attacks at application level. It might not work stand-alone but I would be very sure it helps.

Spoiler: Video

Slides: https://www.defcon.org/images/defcon-22/...PDATED.pdf

[Miracle]

Damn. CloudFlare is useless I've seen many websites using it and still ending up getting DDoS'ed. There are also many bypasses to it.