ubiquity / .github

3 stars 8 forks source link

Cloudflare as a Risk #111

Open 0x4007 opened 4 weeks ago

0x4007 commented 4 weeks ago

I've received a few emails from Cloudflare sales but didn't make time to speak with them. Turns out they are developing a reputation for extortion. It's something we should have a plan for/think about. I'm expecting them to pull the plug just when we start onboarding partners.

whilefoo commented 4 weeks ago

Right now we're using Cloudflare only for the kernel and plugins, right? The only thing that stops us from quickly switching over is the KV. We could use a database and hono.dev which would make it simple to switch but of course the priority right now is to ship v2

0x4007 commented 4 weeks ago

In the context of the bot, yes its basically just for Workers. However we also do handle all of our DNS settings on there for our domains which can be complex to fix if we need to hastily move off. Perhaps we should set up redundant serverless infra and then we can switch faster when they pull the rug. For example we have CI deploys as well on personal Vercel instances (free, if ran from forks.)

I already have ubq.fi hosted on a separate registrar so it shouldn't be too difficult to point the nameservers elsewhere.

gentlementlegen commented 4 weeks ago

It is quite ludicrous. But they seem to target big whales because they expect to make money out of it. I do not think we would be a target before reaching quite a heavy payload.

I can't think of many alternatives, but one I could mention is Azure services with https://azure.microsoft.com/en-us/products/functions . They are usually quite generous on the usage, and I never heard such extortion scenarios. And on the plus side, we would stick to Microsoft products, since we already use GitHub quite extensively.

0x4007 commented 4 weeks ago

We could use a database and hono.dev which would make it simple to switch

Pretty interesting although I'm very cautious to introduce new technologies. Fortunately they emphasize being small and performant which implies it is probably simple to use.

0x4007 commented 3 weeks ago

https://x.com/levelsio/status/1800512938345930952?s=46&t=bdMjuqzO5LYxLUsloRROxQ