This commit is contained in:
resistance 2020-09-01 08:57:34 +02:00
commit 620d25bcaa
4 changed files with 35 additions and 15 deletions

Binary file not shown.

View File

@ -12,7 +12,7 @@
![CrimeFlarE logo](../image/crimeflare-logo.png) ![CrimeFlarE logo](../image/crimeflare-logo.png)
Are you already aware of the problems of Cloudflare? Are you already aware of the problems of [Cloudflare](https://www.cloudflare.com/)?
You might want to check: You might want to check:
- [Alternatives](#alternatives) - [Alternatives](#alternatives)
@ -22,17 +22,17 @@ You might want to check:
## Who are we? ## Who are we?
`CrimeFlarE` is a group of volunteer Tor, privacy and net neutrality `CrimeFlarE`(CFE) is a group of volunteer [Tor](https://www.torproject.org/), privacy and net neutrality
enthusiasts working to counter CloudFlares oppressive attack on the Tor enthusiasts working to counter CloudFlares oppressive attack on the Tor
community and reduce the harms CloudFlare brings to all users (Tor users and community and reduce the harms CloudFlare brings to all users (Tor users and
clearnet users). clearnet users).
## Who is Cloudflare? ## Who is Cloudflare?
Cloudflare is the world's largest man-in-the-middle proxy. Technically it is called "reverse proxy". Cloudflare is the world's largest man-in-the-middle proxy. Technically it is called "[reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)".
This means that it sits between you and the server which sent you webpages and images. This means that it sits between you and the server which sent you webpages and images.
Cloudflare is a content delivery network, which means that it has different Cloudflare is a [content delivery network](https://en.wikipedia.org/wiki/Content_delivery_network), which means that it has different
servers in different locations, so that websites are supposed to be better servers in different locations, so that websites are supposed to be better
reachable. This has some bad sides. reachable. This has some bad sides.
@ -68,7 +68,7 @@ Read more about the [reCAPTCHA problem](../subfiles/recaptcha-problem.md).
#### Project Honey Pot #### Project Honey Pot
"Project Honey Pot" is a project which collects a lot of personal data "[Project Honey Pot](https://www.projecthoneypot.org/)" is a project which collects a lot of personal data
and much of that data is from innocent people who deserve privacy. and much of that data is from innocent people who deserve privacy.
Cloudflare was created by people who worked on that project. US DHS showed interest to this project. Cloudflare was created by people who worked on that project. US DHS showed interest to this project.
@ -81,13 +81,17 @@ Cloudflare is not convenient for many visitors of your site.
You will lose visitors when you choose Cloudflare. You will lose visitors when you choose Cloudflare.
Many people who helped writing this file even blocked by Cloudflare. Many people who helped writing this file even blocked by Cloudflare.
Did you know that you can lose visitors because your site doesn't load in a few seconds? Did you know that you can lose visitors because your site [doesn't load in a few seconds](https://www.hostingmanual.net/3-seconds-how-website-speed-impacts-visitors-sales/)?
Cloudflare often makes visitors wait for more than few seconds. Cloudflare often makes visitors wait for more than few seconds.
Many visitors will just leave your site when they see this. Many visitors will just leave your site when they see this.
![](https://codeberg.org/crimeflare/cloudflare-tor/media/branch/master/image/onemorestep.jpg) ![](https://codeberg.org/crimeflare/cloudflare-tor/media/branch/master/image/onemorestep.jpg)
No one wants to click multiple images just to read your website.
Here is an [example video](../subfiles/cloudflare-video-01.md) of CloudFlare blocking user who is using privacy add-ons.
### Other problems ### Other problems

View File

@ -7,39 +7,54 @@
## Self-hosting ## Self-hosting
Self-hosting often works great, but it requires some effort to setup. It is Self-hosting often works great, but it requires some effort to setup.
more aimed at technical people. It is more aimed at technical people.
We might create a guide for some self-hosting basics which don't require Cloudflare. We might create a guide for some self-hosting basics which don't require Cloudflare.
[IPFS](https://ipfs.io/) may be worth consideration if performance is the main concern. [IPFS](https://ipfs.io/) may be worth consideration if performance is the main concern.
`Apache` is vulnerable to various low-bandwidth attacks. Use other server software such as [Caddy](https://caddyserver.com/), [lighttpd](https://www.lighttpd.net/) or [nginx](https://nginx.org/).
## Best way to protect your server from DDoS
- Avoid any third-party service that _can intercept_ HTTP traffic (like Cloudflare)
- Install WAF on your loadbalancer.
- Even simple [ModSecurity](https://www.modsecurity.org/) can save you.
- Add rate-limit to your nftable(firewall) and server software.
- Just drop the excessive connection.
## Alternatives ## Alternatives
| Alternative | Drawback | Price | Link | | Alternative | Drawback | Price | Link |
| ----------------- | --------------------------------- | ------ | ---- | | ----------------- | --------------------------------- | ------ | ---- |
| Akamai | can be used to block Tor | ? | https://akamai.net/ |
| BunnyCDN | ? | $0.01+ | https://bunnycdn.com/ |
| Codeberg pages | no custom domain support; tor hostility | Free | https://pages.codeberg.org/ | | Codeberg pages | no custom domain support; tor hostility | Free | https://pages.codeberg.org/ |
| [eQualitie](https://equalit.ie/) | not gratis | gratis during COVID19 | https://equalit.ie/ | | Gitee pages | must understand Chinese | Free | https://gitee.com/help/articles/4136 |
| Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) | | Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) |
| Level 3 | ? | Enterprise | https://www.centurylink.com/ |
| PerimeterX | not gratis | ? | - | | PerimeterX | not gratis | ? | - |
| [sucuri](https://sucuri.net) | not gratis; tor hostility at ~3.483% | $200+ | https://sucuri.net/| | Sharktech DDoS Solutions | ? | ? | https://sharktech.net/ |
| Surge.sh | uses custom servers | Free | https://surge.sh/ | | Surge.sh | uses custom servers | Free | https://surge.sh/ |
| Voxility | ? | ? | https://www.voxility.com/ |
| [eQualitie](https://equalit.ie/) | not gratis | gratis during COVID19 | https://equalit.ie/ |
| neoCities | static pages | Free | https://neocities.org/ |
| sucuri | not gratis; tor hostility at ~3.483% | $200+ | https://sucuri.net/|
## Not researched yet ## Not researched yet
### CDNJS ### CDNJS
CDNJS is sponsored by Cloudflare. It might use it in the background. `CDNJS` is sponsored by Cloudflare. It might use it in the background.
## Why X is not included ## Why X is not included
| X | Reason | | X | Reason |
| ------- | ------ | | ------- | ------ |
| Cloudflare Argo | Uses Cloudflare. |
| Gitlab pages | GitLab is now Cloudflared | | Gitlab pages | GitLab is now Cloudflared |
| Imperva | Uses Cloudflare. | | Imperva | Uses Cloudflare. |
| jsDelivr | Uses Cloudflare, see their [network page](https://www.jsdelivr.com/network) |
| Netlify | Uses Amazon AWS which is also a content delivery network. It would be hypocritical to include it. | | Netlify | Uses Amazon AWS which is also a content delivery network. It would be hypocritical to include it. |
| Siteground | Tor-hostile people. | | Siteground | Tor-hostile people. |
| jsDelivr | Uses Cloudflare, see their [network page](https://www.jsdelivr.com/network) |
## History ## History
Sucuri and eQualitie have a history of CloudFlare patronage, but no longer. Sucuri and eQualitie have a history of CloudFlare patronage, but no longer.
[//]: # ( go.impv is CF. | [Imperva](https://www.imperva.com) | not gratis; tor hostility at ~3.411% | ? | https://www.imperva.com |)

View File

@ -0,0 +1 @@
<iframe width="480" height="390" src="https://codeberg.org/crimeflare/cloudflare-tor/raw/branch/master/image/cloudflare_withprivaon.mp4" frameborder="0" allowfullscreen></iframe>