based cloudflare

  • tekato@lemmy.world
    link
    fedilink
    English
    arrow-up
    53
    arrow-down
    1
    ·
    16 hours ago

    Cloudflare blocks VPNs at the request of whoever is running the server. There are tons of websites running on Cloudflare that work with VPNs.

    • IphtashuFitz@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      edit-2
      13 hours ago

      Exactly. My employer uses Akamai, which is larger than Cloudflare. Akamai provides the ability to block traffic from Tor, traffic from VPNs, traffic from any countries you desire, and so on. They also provide managed lists of countries listed in things like ITAR so you can easily block them if you want.

    • Mose13@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      1
      ·
      16 hours ago

      There are also many Lemmy instances that are intentionally blocking VPNs because they have to to stay afloat.

    • Dr. Moose@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      4
      ·
      11 hours ago

      Nope. Cloudflare use a complex set of fingerprinting tools that determine security scores. It’s literally social credit system for web user agents and the site admits have little control over that.

      • AmbiguousProps@lemmy.today
        link
        fedilink
        English
        arrow-up
        8
        ·
        edit-2
        8 hours ago

        While true that there are security scores, the site admins set which score (if any) to block at. So, they do have control over that. Same goes for the bot fight mode as well. So, site admins do have control over whether or not to block based on the associated score, just not over the calculation itself unless configured otherwise.

        • Dr. Moose@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          7 hours ago

          The control is very limited unless you’re enterprise subscriber and even then CF is super sneaky and doesnt actually report the real world. I had a few clients where they were clearly suffering losses due to cf implementation (you could literally see sales dip when cf is enabled) but they didnt believe me because cf dashboard doesn’t report false positives or anything of that sort and they had no in house analytics to really understand the issue.