Replying to Avatar semisol

Cloudflare is an unnecessary bottleneck that I will not use for anything beyond misc. things unless I absolutely have to.

Why not switch to a relay that cares?

nostr:note13s4leflzhxlf9lh4uedm77kg6fstw2ews8yzyry903r7h534z2vqyp2uz9
Avatar
bumi 1mo ago 💬 1

what do you use to deal with DDoS and similar?

Reply to this note

Please Login to reply.

Discussion

Avatar
semisol 1mo ago 💬 2

application level protection, AUTH, and my hosting provider.

the major threat to relays is an L7 attack which CF cannot effectively mitigate on WebSockets.

Avatar
bumi 1mo ago

interesting.

my experience is different there actually.

Avatar
ChipTuner 1mo ago

Yeah but even worse than generic L7 (usually being http). The mitigation *has* to be deferred to the application server (or custom mitm proxies). The old school forms of http-level protections are mostly useless.