pls dont use cloudflare - Githubissues

snuffyDev / Beatbump

Alternative YouTube Music frontend built with Svelte/SvelteKit 🎧

https://beatbump.io/

GNU Affero General Public License v3.0

1.03k stars 87 forks source link

pls dont use cloudflare #93

Open hxvy0 opened 1 year ago

hxvy0 commented 1 year ago

pls dont use cloudflare due privacy. or suggest a non-cloudflare istance

davidcollini commented 1 year ago

pls dont use cloudflare due privacy. or suggest a non-cloudflare istance

@Esmailelbobdev2 does your instance use cloudflare? If it does it should be possible for someone else to host a non-cloudflare instance

snuffyDev commented 1 year ago

The primary reason the main official instance uses Cloudflare (for both reverse proxy, as well as Cloudflare workers) is because it's free/dirt cheap and is fast, and is pretty trustworthy in my near two years' experience with them (some folks may feel differently, which is fine of course), while also reducing some of the issues involving geo-blocking.

I'm working on a way to put third-party instances of Beatbump into focus, via the in-app settings and maybe a portal-page that will link to other instances & provide relevant privacy notices.

It will take time of course since there's a lot to juggle with Beatbump, but I can assure you I'm working on it!

EsmailELBoBDev2 commented 1 year ago

@IronMaltese who shall awaken me from my sleep with mentions (joking, feel free to mention)

Nope! I do not use Cloudflare at all. I rely on Kimsufi's DDoS mitigation (https://www.kimsufi.com/us/en/about-ks/index.xml#protection) so if my server DDoSed. Well, it's OVH's problem

EsmailELBoBDev2 commented 1 year ago

some folks may feel differently, which is fine of course

@snuffyDev I love cloudflare but as CDN, but let's face it. The whole company business model is to log IPs and for me, I hate them for that.

It's like working as a thief, sure it's a job, and it has business model, but it does not change the fact it's bad one!

EsmailELBoBDev2 commented 1 year ago

@IronMaltese who shall awaken me from my sleep with mentions (joking, feel free to mention)

Nope! I do not use Cloudflare at all. I rely on Kimsufi's DDoS mitigation (https://www.kimsufi.com/us/en/about-ks/index.xml#protection) so if my server DDoSed. Well, it's OVH's problem

Which one of you is doing it :eyes: https://social.esmailelbob.xyz/@esmail/108890509916877145

hxvy0 commented 1 year ago

esmail el bob's istance not working.

EsmailELBoBDev2 commented 1 year ago

@hxvy0 next time mention :-P

I can't test it on my end as in both cases beatbump is blocked for me haha! so can someone confirm please songs does not play (only) in my instance, thanks

EDIT: Nevermind, updated it and now it should work. thanks for the heads up

Edit of edit: nope after update still no luck, I will try to build from docker instead pull already built image

Edit of edit of edit: okay now updated and as used to be some songs play (luckily enough it's my fav singer and he is Ed sheeran) so I think we are back to normal? can you confirm songs play now?

EsmailELBoBDev2 commented 1 year ago

@snuffyDev I'm confused I use docker.io/snuffydev/beatbump and I feel it's still outdated...

UPDATE: oh my god I just noticed there is docker compose file within git repo I thought you still use beatbump docker-compose repo :joy:

Kreyren commented 1 year ago

I'm working on a way to put third-party instances of Beatbump into focus, via the in-app settings and maybe a portal-page that will link to other instances & provide relevant privacy notices. -- @snuffyDev (https://github.com/snuffyDev/Beatbump/issues/93#issuecomment-1222778975)

FWIW I use LibreRedirect so if you know about any 3rd party instance then contribute them to https://github.com/libredirect/libredirect/blob/master/src/instances/beatbump.json

But functionality like https://instances.invidious.io would be great.. Ideally one that does the transfer transparently each time instance goes down so that it's basically seemless federated network

..It also flags Cloudflare instances so they are easy to disable 2022-09-02_12-09

FWIW2: I as a privacy and security advocate I am not aware of a good reason to not use cloudflare if it's DDoS gate (that is constantly ruining my life on onion-routing with randomized fingerprint browser) is disabled as it won't allow any user that it can't fingerprint through.. Personally the only useful usecase for me to use the cloudflare gate is to make sure that my setup is set correctly :sweat_smile: and i wouldn't recommend it to anyone who wants DDoS management as it's evidently a huge Man-In-The-Middle spyware.

Relevant: https://github.com/snuffyDev/Beatbump/issues/58

snuffyDev commented 11 months ago

Update: working on this. Just trying to find a Workers-like platform with decent pricing. Working on migrating to BunnyCDN/DNS

snuffyDev commented 11 months ago

The biggest blocker atm is hosting. I could use a VPS like Vultr, but that has the potential to cost more overall than I would want to pay.

Break down of the numbers:

Currently Beatbump serves ~70-120GB of data a month
Beatbumps new (unreleased) rewrite / update has the ability to proxy audio streams. Therefore that 70 to 120 GB per month could easily skyrocket into multiple terabytes, considering how much media band with uses.
Assuming that more people use the service once everything is all said and done, the base amount of bandwidth could grow by double or triple very quickly
Factoring that in- if theoretically, more people are using the service and listening to songs and streaming more, then that just further increases the amount of bandwidth cost - that's the bottleneck

Not to mention considering the amount of international usage people like seeing localized content if I'm in India, I want to see India. I don't want to see the United States so that's another additional issue