{"id":861,"date":"2014-04-03T15:01:09","date_gmt":"2014-04-03T13:01:09","guid":{"rendered":"\/\/www.mcgill.org.za\/stuff\/?p=861"},"modified":"2018-02-20T14:11:55","modified_gmt":"2018-02-20T12:11:55","slug":"cloudflare-doesnt-help","status":"publish","type":"post","link":"https:\/\/www.mcgill.org.za\/stuff\/archives\/861","title":{"rendered":"Cloudflare doesn&#8217;t help your DDOS"},"content":{"rendered":"<p>Ever since CloudFlare helped out Spamhaus with their big deal big DNS reflection DDOS attack, conventional wisdom has said that if you are faced with a DDOS attack, you should give CloudFlare a shot. By all means, give it a try: they have a compelling free offer that seems to be just the thing you need.<\/p>\n<p>Here is what will happen:<\/p>\n<ul>\n<li>You switch your DNS to cloudflare<\/li>\n<li>You get your site up again<\/li>\n<li>You receive a DDOS attack<\/li>\n<li>You survive said DDOS attack<\/li>\n<li>You think cloudflare is cool<\/li>\n<li>You tell all your friends<\/li>\n<li>You get a new and rewewed DDOS attack<\/li>\n<li>You get a mail like below from cloudflare saying, basically, sorry dude, you&#8217;re toast.<\/li>\n<li>You can now choose to pay $200 USD per month, or accept that your site is just sometimes going to be down.<\/li>\n<\/ul>\n<p>The moral of the story is: you&#8217;re not spamhaus. \u00a0To be fair, cloudflare do say, somewhere in their blog or site that they&#8217;re not a DDOS solution.<\/p>\n<pre>From: CloudFlare &lt;no-reply@cloudflare.com&gt;\r\nSubject: victim.co.za has been temporarily removed from CloudFlare\r\nDate: Mon, 24 Mar 2014 02:11:21 +0000\r\n\r\nCloudFlare has temporarily deactivated your website victim.co.za.\r\n\r\nYour visitors will be directed to your origin server, where your website is hosted, instead of first passing through CloudFlare\u2019s performance and security service. We\u2019ll resume routing traffic through CloudFlare once the issue has been resolved. We review deactivated websites every 5 to 7 business days. To check your status, please log into: www.cloudflare.com\/my-websites\r\n\r\nCOMMON QUESTIONS\r\n\r\nWHY WAS MY SITE TEMPORARILY DEACTIVATED?\r\nCloudFlare runs a globally distributed network serving millions of websites. Sometimes a large DDOS attack to one of our Free or Pro customers may degrade network performance. In these cases, we may temporarily remove the website under attack to avoid network degradation.\r\n\r\nI AM ON THE FREE OR PRO PLAN. WILL UPGRADING TO BUSINESS HELP?\r\nYes. CloudFlare's advanced DDOS protection is included in the Business and Enterprise plans. If you upgrade to the Business plan, your website will be activated again.\r\n\r\nHOW LONG WILL IT TAKE TO REACTIVATE MY SITE IF I DON\u2019T UPGRADE?\r\nWe review deactivated websites every 5 to 7 business days.\r\n\r\nIF I DELETE MY SITE AND RE-ADD IT, WILL THE TEMPORARY HOLD DISAPPEAR?\r\nNo. Any temporary holds are attached to the domain so deleting and re-adding the website will not change its status.\r\n\r\nReplies to this email are not monitored or answered. For FAQs or to reach our help desk, please visit: www.cloudflare.com\/support\r\n\r\nThank you for using CloudFlare.\r\n\r\nThe CloudFlare Team\r\n\r\n***This is an automatic notification for victim.co.za<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Ever since CloudFlare helped out Spamhaus with their big deal big DNS reflection DDOS attack, conventional wisdom has said that if you are faced with a DDOS attack, you should give CloudFlare a shot. By all means, give it a &hellip; <a href=\"https:\/\/www.mcgill.org.za\/stuff\/archives\/861\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[149,17,16,190,6],"class_list":["post-861","post","type-post","status-publish","format-standard","hentry","category-stuff","tag-cloudflare","tag-rants","tag-security","tag-stuff","tag-truth"],"_links":{"self":[{"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/posts\/861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/comments?post=861"}],"version-history":[{"count":5,"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/posts\/861\/revisions"}],"predecessor-version":[{"id":871,"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/posts\/861\/revisions\/871"}],"wp:attachment":[{"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/media?parent=861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/categories?post=861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcgill.org.za\/stuff\/wp-json\/wp\/v2\/tags?post=861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}