folk.zone Wiki

a public knowledge base

Site Tools

Trace: • caddy_502_bad_gateway • freshrss • tmux_byobu • browser_monoculture • ssh_homelab • caddy • forgejo • editors • trust_online • services
folkzone:networking:cdn_consolidation

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

folkzone:networking:cdn_consolidation [2026/09/23 14:52] – created - external edit 127.0.0.1folkzone:networking:cdn_consolidation [2026/10/23 15:46] (current) – external edit 127.0.0.1
Line 3: Line 3:
 ===== The Scale of the Problem ===== ===== The Scale of the Problem =====
  
-[[https://www.cloudflare.com/|Cloudflare]] currently serves approximately **25% of all Internet sites**. A single private company acts as infrastructure for a quarter of the web — making content delivery decisions, inspecting HTTPS traffic as a reverse proxy, and holding unilateral power over who gets to remain online.+[[https://www.cloudflare.com/|Cloudflare]] currently serves approximately **25% of all Internet sites**. A single private company acts as infrastructure for a quarter of the web: making content delivery decisions, inspecting HTTPS traffic as a reverse proxy, and holding unilateral power over who gets to remain online.
  
 The [[https://pulse.internetsociety.org/en/blog/2025/11/how-consolidation-is-eroding-internet-resilience/|Internet Society has documented]] how this consolidation erodes Internet resilience. The fragility was demonstrated concretely: The [[https://pulse.internetsociety.org/en/blog/2025/11/how-consolidation-is-eroding-internet-resilience/|Internet Society has documented]] how this consolidation erodes Internet resilience. The fragility was demonstrated concretely:
  
-  * **November 18, 2025** — a bug in Cloudflare's Bot Management triggered a global outage. Roughly 1 in 5 webpages affected at peak; a third of the world's 10,000 most popular websites down (X, ChatGPT, Spotify, Canva, Downdetector) +  * **November 18, 2025**: a bug in Cloudflare's Bot Management triggered a global outage. Roughly 1 in 5 webpages affected at peak; a third of the world's 10,000 most popular websites down (X, ChatGPT, Spotify, Canva, Downdetector) 
-  * **December 5, 2025** — a second major outage, 17 days later, caused by a WAF change during a React Server Components vulnerability patch+  * **December 5, 2025**: a second major outage, 17 days later, caused by a WAF change during a React Server Components vulnerability patch
  
 ===== The Privacy Problem ===== ===== The Privacy Problem =====
Line 19: Line 19:
  
 ^ Year ^ Platform ^ Reason Dropped ^ Notable Detail ^ ^ Year ^ Platform ^ Reason Dropped ^ Notable Detail ^
-| 2017 | Daily Stormer | Charlottesville attack | Prince said he "woke up in a bad mood" — his own framing |+| 2017 | Daily Stormer | Charlottesville attack | Prince said he "woke up in a bad mood": his own framing |
 | 2019 | 8chan | El Paso shooting | Framed as uncomfortable departure from "infrastructure neutrality" | | 2019 | 8chan | El Paso shooting | Framed as uncomfortable departure from "infrastructure neutrality" |
 | 2022 | Kiwi Farms | "Imminent threat to human life" | Prince spent days publishing 2,600-word posts defending continued service, reversed within 72 hours | | 2022 | Kiwi Farms | "Imminent threat to human life" | Prince spent days publishing 2,600-word posts defending continued service, reversed within 72 hours |
Line 30: Line 30:
 Slovenian CDN. EU-headquartered, GDPR-native. Pay-as-you-go from $0.01/GB. DDoS protection, CDN, edge scripting. No tiered plans that punish growth. Smaller scale than Cloudflare, but a conscience-compatible choice. Slovenian CDN. EU-headquartered, GDPR-native. Pay-as-you-go from $0.01/GB. DDoS protection, CDN, edge scripting. No tiered plans that punish growth. Smaller scale than Cloudflare, but a conscience-compatible choice.
  
-**[[https://deflect.ca/|Deflect]]** — see [[folkzone:networking:deflect|Deflect]] for full details\\+**[[https://deflect.ca/|Deflect]]**: see [[folkzone:networking:deflect|Deflect]] for full details\\
 Canadian. Non-profit social enterprise (eQualitie, Montréal). Free for civil society, human rights, independent media. Commercial customers subsidize that protection. Canadian. Non-profit social enterprise (eQualitie, Montréal). Free for civil society, human rights, independent media. Commercial customers subsidize that protection.
  
-**Self-hosted with Cloudflare Tunnel**\\ +**Self-hosted, direct HTTPS**\\ 
-This homelab uses [[folkzone:services:cloudflared|Cloudflare Tunnel]] for reverse proxy/access — a narrower dependency than using Cloudflare as a full CDN/DDoS layer for public-facing sites. The tunnel provides SSH and service access without exposing ports; it does not proxy all public traffic through Cloudflare's inspection layer.+folk.zone serves public traffic directly via Caddy and Let's Encrypt, with no Cloudflare in the path. Some homelab machines still use [[terminal:tools:ssh_via_cloudflare|Cloudflare Tunnel]] for remote SSH access: a narrower dependency than using Cloudflare as a full CDN/DDoS layer for public-facing sites.
  
 ===== The Astro/EmDash Situation ===== ===== The Astro/EmDash Situation =====
Line 42: Line 42:
 The Gatsby precedent is relevant: Netlify [[https://techcrunch.com/2023/02/01/netlify-acquires-frontend-platform-gatsby/|acquired Gatsby in February 2023]], gutted the engineering team within months, shuttered Gatsby Cloud by August, and never ported the promised features. Gatsby entered dependency hell. The Gatsby precedent is relevant: Netlify [[https://techcrunch.com/2023/02/01/netlify-acquires-frontend-platform-gatsby/|acquired Gatsby in February 2023]], gutted the engineering team within months, shuttered Gatsby Cloud by August, and never ported the promised features. Gatsby entered dependency hell.
  
-Whether Cloudflare's stewardship of Astro follows the same pattern is unknown. The incentive structure differs — Cloudflare wants Astro to power EmDash, which powers Workers, which is their core business. Netlify wanted Gatsby's enterprise customer list.+Whether Cloudflare's stewardship of Astro follows the same pattern is unknown. The incentive structure differs: Cloudflare wants Astro to power EmDash, which powers Workers, which is their core business. Netlify wanted Gatsby's enterprise customer list.
  
 ===== See Also ===== ===== See Also =====
   * [[folkzone:networking:start|Homelab Networking Index]]   * [[folkzone:networking:start|Homelab Networking Index]]
  
-  * [[folkzone:networking:deflect|Deflect — DDoS Protection for Independent Media]] +  * [[folkzone:networking:deflect|Deflect: DDoS Protection for Independent Media]] 
-  * [[folkzone:services:cloudflared|Cloudflare Tunnel (homelab usage)]]+  * Cloudflare Tunnel (homelab usage)
   * [[indieweb:good_web|The Good Web]]   * [[indieweb:good_web|The Good Web]]
   * [[protocols:smallweb:browser_monoculture|Browser Monoculture]]   * [[protocols:smallweb:browser_monoculture|Browser Monoculture]]
folkzone/networking/cdn_consolidation.1790196766.txt.gz · Last modified: by 127.0.0.1