They get shit on a lot here. Why? What do they do and how is that different from other companies that offer similar services?
What I know of them: they offer DDS brute force/spam protection for websites.
Most people enjoy bandwagon jumping onto hating the status-quo. If Cloudflare goes down, the majority of the internet goes with it, because they are the most prolific private entity that owns most of the hardware running the entire internet.
They are the biggest because they provide the overall best and essentially fastest level of DDoS, geoIP block, and packet-inspection malware protection of any provider on commercial hardware short of utilising spooky predictive DARPA machine learning algorithms that ride the razors edge of sapience on government funded terawatt supercomputer clusters. They are expensive and you get what you pay for.
That’s exactly why many of us dislike cloudfare. They’ve maneuvered themselves into a “too big to fail” position. Seems to be the goal of big corps these days.
I wouldn’t call it hate, just concern.
Cloudflare acts as a front door to many sites and as such your TLS session is terminated at Cloudflare, then CF makes a additional session from themselves to the target site.
This is concerning as that means CF can see all of your data.It’s worth mentioning the advantage of why they do this. There are several reasons, but the two most common are:
-
Seeing the data means they can do a better job at detecting attacks and fending them off.
-
They can issue certificates with longer lives from their private CA which simplifies certificate management for their customers.
considering they are a US company they are bound by US warrantless wiretapping laws.
-