CF-Shield – An open source tool to protect any website with Cloudflare

17•Sakura-sx•7mo ago

Comments

Sakura-sx•7mo ago

It was fun making it, I hope you like it :3

udev4096•7mo ago

If bloating the web and centralizing it is your goal, you did well. Clownflare would die if it weren't for the oblivious customers such as yours

Firehawke•7mo ago

Hey, you go and stop every DDOSing asshole out there and I'll be glad to express that cloudflare should go away. Otherwise, those paying per-byte on bandwidth overage are more than glad to have a safety layer.

Sakura-sx•7mo ago

If your goal is to decentralize the web, you can buy our offerings at Voxga Research (voxga.es). We are a direct competitior to Cloudflare on the DDoS protection space.

udev4096•7mo ago

That looks cool. So, with project satyr, you are hoping that attackers would access your honeypot proxies from their actual IP? I find that hard to believe. Most of them either use a reputed VPN or Tor as their first point of entry so you are just hoping for low hanging fruits here, which makes for a shitty threat intel

Sakura-sx•7mo ago

Not really, most DDoS attacks are made from servers, taking down those servers makes the attacker need to get new ones. And from the logs I can assure you that 90% of the time it is a server, and the rest it is either residential IPs or VPNs but residential IPs are seen more i'd say.

pier25•7mo ago

doesn't CF protect websites automatically from DDoS?

oter•7mo ago

afaik meant to alert and mitigate, not protect. there are ddos attacks that get through cloudflare's lower tier plans

dangoodmanUT•7mo ago

That’s literally what it’s there for

Sakura-sx•7mo ago

No, it is there to make money, if their free plan included perfect DDoS protection no one would get the more pricier ones.

Sakura-sx•7mo ago

Yeah, many DDoS attacks get through cloudflare's lower tier plans, in fact bypassing cloudflare free is considered the bare minimum for a "stresser".

phantomathkg•7mo ago

How does it differ from existing Cloudflare DDoS protection on free tier? https://www.cloudflare.com/en-gb/ddos/

Sakura-sx•7mo ago

It captchas everyone when there is an attack.

userbinator•7mo ago

You mean "to further the browser monopoly".

Sakura-sx•7mo ago

Sir, I work against Cloudflare's monopoly on Voxga Research. But for a lot of people it is practical.

Show HN: I built a RAG engine to search Singaporean laws

Scams, Fraud, and Fake Apps: How to Protect Your Money in a Mobile-First Economy

Porting Doom to My WebAssembly VM

Cognitive Style and Visual Attention in Multimodal Museum Exhibitions

Full-Blown Cross-Assembler in a Bash Script

Logic Puzzles: Why the Liar Is the Helpful One

Optical Combs Help Radio Telescopes Work Together

Show HN: Myanon – fast, deterministic MySQL dump anonymizer

The Tao of Programming

Forcing Rust: How Big Tech Lobbied the Government into a Language Mandate

PanelBench: We evaluated Cursor's Visual Editor on 89 test cases. 43 fail

Can You Draw Every Flag in PowerPoint? (Part 2) [video]

Show HN: MCP-baepsae – MCP server for iOS Simulator automation

Make Trust Irrelevant: A Gamer's Take on Agentic AI Safety

Show HN: Sem – Semantic diffs and patches for Git

Hello world does not compile

Show HN: ZigZag – A Bubble Tea-Inspired TUI Framework for Zig

Metaphor+Metonymy: "To love that well which thou must leave ere long"(Sonnet73)

Show HN: Django N+1 Queries Checker

Emacs-tramp-RPC: High-performance TRAMP back end using JSON-RPC instead of shell

Protocol Validation with Affine MPST in Rust

Female Asian Elephant Calf Born at the Smithsonian National Zoo

Show HN: Zest – A hands-on simulator for Staff+ system design scenarios

Show HN: DeSync – Decentralized Economic Realm with Blockchain-Based Governance

Automatic Programming Returns

Why Are There Still So Many Jobs? The History and Future of Workplace Automation [pdf]

The Search Engine Map

Show HN: Souls.directory – SOUL.md templates for AI agent personalities

Real-Time ETL for Enterprise-Grade Data Integration

Economics Puzzle Leads to a New Understanding of a Fundamental Law of Physics

Show HN: I built a RAG engine to search Singaporean laws

Scams, Fraud, and Fake Apps: How to Protect Your Money in a Mobile-First Economy

Porting Doom to My WebAssembly VM

Cognitive Style and Visual Attention in Multimodal Museum Exhibitions

Full-Blown Cross-Assembler in a Bash Script

Logic Puzzles: Why the Liar Is the Helpful One

Optical Combs Help Radio Telescopes Work Together

Show HN: Myanon – fast, deterministic MySQL dump anonymizer

The Tao of Programming

Forcing Rust: How Big Tech Lobbied the Government into a Language Mandate

PanelBench: We evaluated Cursor's Visual Editor on 89 test cases. 43 fail

Can You Draw Every Flag in PowerPoint? (Part 2) [video]

Show HN: MCP-baepsae – MCP server for iOS Simulator automation

Make Trust Irrelevant: A Gamer's Take on Agentic AI Safety

Show HN: Sem – Semantic diffs and patches for Git

Hello world does not compile

Show HN: ZigZag – A Bubble Tea-Inspired TUI Framework for Zig

Metaphor+Metonymy: "To love that well which thou must leave ere long"(Sonnet73)

Show HN: Django N+1 Queries Checker

Emacs-tramp-RPC: High-performance TRAMP back end using JSON-RPC instead of shell

Protocol Validation with Affine MPST in Rust

Female Asian Elephant Calf Born at the Smithsonian National Zoo

Show HN: Zest – A hands-on simulator for Staff+ system design scenarios

Show HN: DeSync – Decentralized Economic Realm with Blockchain-Based Governance

Automatic Programming Returns

Why Are There Still So Many Jobs? The History and Future of Workplace Automation [pdf]

The Search Engine Map

Show HN: Souls.directory – SOUL.md templates for AI agent personalities

Real-Time ETL for Enterprise-Grade Data Integration

Economics Puzzle Leads to a New Understanding of a Fundamental Law of Physics

CF-Shield – An open source tool to protect any website with Cloudflare

Comments