Info CloudFlare new ban wave

[TeslaVision]

Probably many of the CloudFlare users noticed it (but not all for some reason?) a ban wave happened yesterday, they sent out emails about it, people saw their streams blocked with a message from CloudFlare instead and traffic for anything else extremely slow...

it happened to me as well, and for those wondering, no i didn't have LBs behind CF, only main... i had Down Status Videos but wasn't delivered by main server but from a LB...
On my account i got few domains only one domain got limited and blocked (the most important one still) for some reason that i don't really understand the others were not impacted...

Unfortunately i wasn't able to find a solution yet or an alternative that is brining WAF and DNS Proxy even close to what CF provides even if had to pay... (ofc i didn't look at any shit that was way to expensive)...

Exemple of mail received :



Example of stream replacement :

 

[ᴾᵀ_ᵀᵘᵍᵃ]

Probably many of the CloudFlare users noticed it (but not all for some reason?) a ban wave happened yesterday, they sent out emails about it, people saw their streams blocked with a message from CloudFlare instead and traffic for anything else extremely slow...

it happened to me as well, and for those wondering, no i didn't have LBs behind CF, only main... i had Down Status Videos but wasn't delivered by main server but from a LB...
On my account i got few domains only one domain got limited and blocked (the most important one still) for some reason that i don't really understand the others were not impacted...

Unfortunately i wasn't able to find a solution yet or an alternative that is brining WAF and DNS Proxy even close to what CF provides even if had to pay... (ofc i didn't look at any shit that was way to expensive)...

Exemple of mail received :

View attachment 5486

Example of stream replacement :

View attachment 5487

Hi, this also happened to me when the cloudflear cloud was turned off and it was resolved but the main is now exposed.
any alternative to cloudflear to use?
Thanks in advance.

 

[pinaliz]

Hi, this also happened to me when the cloudflear cloud was turned off and it was resolved but the main is now exposed.
any alternative to cloudflear to use?
Thanks in advance.

you can use fastly

 

[akawi11]

i had Down Status Videos

seems it's the problem (i think) , if those videos streaming from main server that use CF, mean "is a violation of the terms of service"

 

[TeslaVision]

seems it's the problem (i think) , if those videos streaming from main server that use CF, mean "is a violation of the terms of service"

Nop, as i said they are served from an lb using external ip... Not behind cloudflare...

 

[akawi11]

Nop, as i said they are served from an lb using external ip... Not behind cloudflare...

are you sure about that? can you make request curl -i http.... to the down stream and see which link give you, is lb ip or main ip
you can check "Total Data Served" to understand if the traffic usage, something used CF for streaming video data or large files
and if you already setup by pass cache?
also check epg usage, or logo images usage, something make them to think you need paid plan
if that domain is important, better to pay for paid plan

 

[TeslaVision]

are you sure about that? can you make request curl -i http.... to the down stream and see which link give you, is lb ip or main ip
you can check "Total Data Served" to understand if the traffic usage, something used CF for streaming video data or large files
and if you already setup by pass cache?
also check epg usage, or logo images usage, something make them to think you need paid plan
if that domain is important, better to pay for paid plan

i am sure i did check, i didn't have cache bypass as i used cache to cache epg data for example... when it happened i had a daly total usage of 10GB last 24h and 2GB cache... (it is less than usual)... but like 5 min before it happened i had spike in amout of requests... in the analytics it showing their own ips so no clue what it is...

it happened yesterday to many people including me, and few of them were under paid plan and still same thing happened to them...

 

[pinaliz]

I'm having this problem with 3 domains in one free account. I don't see any problems with my paid 1 account yet. I will keep you informed of the developments and help you.

 

[TeslaVision]

I'm having this problem with 3 domains in one free account. I don't see any problems with my paid 1 account yet. I will keep you informed of the developments and help you.

I got only one of my 3 domains under my free account... And a friend got only 1 of 9 under his free acc... I wasnt able to find a pattern except that i had most waf rules under this acc... I go sleep now as i'm dead 50h+ without sleep...

 

[akawi11]

i am sure i did check, i didn't have cache bypass as i used cache to cache epg data for example... when it happened i had a daly total usage of 10GB last 24h and 2GB cache... (it is less than usual)... but like 5 min before it happened i had spike in amout of requests... in the analytics it showing their own ips so no clue what it is...

it happened yesterday to many people including me, and few of them were under paid plan and still same thing happened to them...

as long it's happen to many, seems they put some new rules about usage traffic
anyway, they just want to push many to paid plan because of high traffic usage

I’m a website operator and my content was redirected for Terms of Service violations​

If you are on a Free, Pro, or Business Plan and your application appears to be serving videos or a disproportionate amount of large files without using the appropriate paid service as described below, Cloudflare may redirect your content or take other actions to protect quality of service. When this happens, you will receive an email notification regarding Cloudflare’s actions and your options.

first thing need to do is to check
dns > analytics

to have better idea about your traffic

 

[mmicha17]

From what i am reading all over the internet, some providers where affected some where not.
Did anyone found the actual reason behind this block?

Its # of data consumed ?
Is because urls contain ts/mp4 media formats ?

 

[Moutamared]

is there any better way to secure the server ( main and LB ) beside using cloudflare guys ?
even using proxies won't be the best solution, because for each lb, you need an equivalant server to serve number of clients will be connected to that lb, like the same network speed and the bandwith and the same RAM as well.
i don't know if there's much better way and don't costs that much to build a secure system !

 

[alqui82]

Probably many of the CloudFlare users noticed it (but not all for some reason?) a ban wave happened yesterday, they sent out emails about it, people saw their streams blocked with a message from CloudFlare instead and traffic for anything else extremely slow...

it happened to me as well, and for those wondering, no i didn't have LBs behind CF, only main... i had Down Status Videos but wasn't delivered by main server but from a LB...
On my account i got few domains only one domain got limited and blocked (the most important one still) for some reason that i don't really understand the others were not impacted...

Unfortunately i wasn't able to find a solution yet or an alternative that is brining WAF and DNS Proxy even close to what CF provides even if had to pay... (ofc i didn't look at any shit that was way to expensive)...

Exemple of mail received :

View attachment 5486

Example of stream replacement :

View attachment 5487

Try Clouflare - Proxy - Main XUI

and you are done

 

[TeslaVision]

as long it's happen to many, seems they put some new rules about usage traffic
anyway, they just want to push many to paid plan because of high traffic usage



first thing need to do is to check
dns > analytics

to have better idea about your traffic

I did and it was almost funny compared to some that didn't got affected...

From what i am reading all over the internet, some providers where affected some where not.
Did anyone found the actual reason behind this block?

Its # of data consumed ?
Is because urls contain ts/mp4 media formats ?

No actually we were searching but were not able to find real thing... As it happened to many but does seem to be related to the size nor the bandwidth usage not even the free or paid tier (not heard about any enterprise tier that got the issue tho only free and pro)... It may have something to do with the ports used that got more "spotable" if i can say it like that... Most of those not affected were using default 80 and 443 ports... Also they mostly didn't use any of the CF real benefits like their insanely powerfull waf and rules... But mostly only the dns cloud proxy... So who knows... My urls had the calls and the requests to the .ts,.mkv,.mp4 and so on ofc because thats part of the requests the apps do but thats all as only main was behind proxy not the LBs... So not actually using cf proxy to transport streams... But they still put this image warning on all request containing stream extention so requests wouldn't even come to reach my main anymore but directly show this...

is there any better way to secure the server ( main and LB ) beside using cloudflare guys ?
even using proxies won't be the best solution, because for each lb, you need an equivalant server to serve number of clients will be connected to that lb, like the same network speed and the bandwith and the same RAM as well.
i don't know if there's much better way and don't costs that much to build a secure system !

Better than cloudflare? No... They are gods in what they do as far as i know they don't even have real competition... That being said there is other ways, you can for example try CDNs (don't expect it to be free like CF nor close to it in terms of security WAF and so, mostly are YEARS behind... But their CDNs can still give something if you can afford...) there is also the possibility to go for reverse proxy(ies) with nginx and mods... But its quite some work and need to maintain that to keep it secure all along... (so require knowledge, skill and time...)

(and no don't expect panels to do security for your structure its not their job...)

Other thing if you can afford id going enterprise with CF but price is killing...

Try Clouflare - Proxy - Main XUI

and you are done

He said other than cloudflare lol... (your proxy there in the middle why is it for except waste of money and add on latency?)

 

[alqui82]

I did and it was almost funny compared to some that didn't got affected...


No actually we were searching but were not able to find real thing... As it happened to many but does seem to be related to the size nor the bandwidth usage not even the free or paid tier (not heard about any enterprise tier that got the issue tho only free and pro)... It may have something to do with the ports used that got more "spotable" if i can say it like that... Most of those not affected were using default 80 and 443 ports... Also they mostly didn't use any of the CF real benefits like their insanely powerfull waf and rules... But mostly only the dns cloud proxy... So who knows... My urls had the calls and the requests to the .ts,.mkv,.mp4 and so on ofc because thats part of the requests the apps do but thats all as only main was behind proxy not the LBs... So not actually using cf proxy to transport streams... But they still put this image warning on all request containing stream extention so requests wouldn't even come to reach my main anymore but directly show this...


Better than cloudflare? No... They are gods in what they do as far as i know they don't even have real competition... That being said there is other ways, you can for example try CDNs (don't expect it to be free like CF nor close to it in terms of security WAF and so, mostly are YEARS behind... But their CDNs can still give something if you can afford...) there is also the possibility to go for reverse proxy(ies) with nginx and mods... But its quite some work and need to maintain that to keep it secure all along... (so require knowledge, skill and time...)

(and no don't expect panels to do security for your structure its not their job...)

Other thing if you can afford id going enterprise with CF but price is killing...


He said other than cloudflare lol... (your proxy there in the middle why is it for except waste of money and add on latency?)

If you think that a proxy server add latency i have nothing else to add.

 

[TeslaVision]

If you think that a proxy server add latency i have nothing else to add.

Lol... There is absolutely no reason to add a proxy server if you use cloudflare... Like absolutely no benefits at all only down sides... And again he asked "other than cloudflare" you start by saying "try cloudflare"... LoooL if you think that you helped him with your answer ye better don't add anything

 

[alqui82]

Lol... There is absolutely no reason to add a proxy server if you use cloudflare... Like absolutely no benefits at all only down sides... And again he asked "other than cloudflare" you start by saying "try cloudflare"... LoooL if you think that you helped him with your answer ye better don't add anything

By adding proxy you can just control firstly the traffic that will go through clouflare and secondly you have much better zapping.

Read better next time.

 

[TeslaVision]

By adding proxy you can just control firstly the traffic that will go through clouflare and secondly you have much better zapping.

Read better next time.

First of all you i think you need to read better as you are no answering the guy's question... Again he asked "without CloudFlare"...
Second you are absolutely wrong... "control the traffic that goes through cloudflare" what a nonsense... Its exactly one of the purpose of cloudflare! And better zapping by adding a proxy? Hahahaha... I think i heard enough nonsense and wrong affirmations... I first thought it was a language barrier and didn't understand what the guy was asking, but its obviously not the case you just pushing what you think with an obvious lack of knowledge on the subject...

 

[alqui82]

First of all you i think you need to read better as you are no answering the guy's question... Again he asked "without CloudFlare"...
Second you are absolutely wrong... "control the traffic that goes through cloudflare" what a nonsense... Its exactly one of the purpose of cloudflare! And better zapping by adding a proxy? Hahahaha... I think i heard enough nonsense and wrong affirmations... I first thought it was a language barrier and didn't understand what the guy was asking, but its obviously not the case you just pushing what you think with an obvious lack of knowledge on the subject...

You know that cloudflare includes WAF ???!! LOL

So YES you can control traffic throught cloudflare with custom rules and ability to reject countries/ips/asn and etc.

If this seems nonsense to you you better read some networking first of all and then answer.

Thank you and have a good day!

 

[TeslaVision]

You know that cloudflare includes WAF ???!! LOL

So YES you can control traffic throught cloudflare with custom rules and ability to reject countries/ips/asn and etc.

If this seems nonsense to you you better read some networking first of all and then answer.

Thank you and have a good day!

That is exactly what i was telling you actually that you don't need a fu**ing proxy on top of cloudflare like you are saying to "control traffic" as its the very purpose of cloudflare!... Beside the language issue and lack of knowledge you have obviously a deeper issue that you need to work on...

Once again and last time, the guy asked to an alternative solution to cloudflare (so NO CLOUDFLARE) you aswered :
Try Cloudflare > Proxy > Main...
Try Cloudflare = what you don't understand in "no cloudflare"?
The proxy in the middle = totally retarded and bring no benefits only downsides...

Cloudflare > Main... Yes
Cloudflare > Proxy > Main... Absolute nonsense
CDN > Main... Yes, answers the guy's question for an alternative solution to cloudflare...
Proxy > Main... Yes, answers the guy's question for an alternative solution to cloudflare...
CDN > Proxy > Main... Yes, depending on the CDN you may want to have a Proxy in between to actually manage the traffic and securities finely as most of CDNs doesn't include a WAF (or por quality...

Anyway go work on your issue rather than forcing here to try change your wrong and nonsense answers in good correct ones...
Ps: i can teach you networking anyday...