Groups > alt.comp.software.firefox > #12789

Re: CloudFlare is blocking smaller browsers

From	Char Jackson <none@none.invalid>
Newsgroups	alt.comp.software.firefox, alt.comp.software.seamonkey
Subject	Re: CloudFlare is blocking smaller browsers
Message-ID	<ttlktjpal47sdbivi47usgin928o56be4d@4ax.com> (permalink)
References	(9 earlier) <vrb4ig$1v0ib$1@dont-email.me> <vrbpgl$2gngj$1@dont-email.me> <vrc0rn$2mq53$1@dont-email.me> <vrchh5$35l7o$1@dont-email.me> <vrck47$380tp$1@dont-email.me>
Organization	Newshosting.com - Highest quality at a great price! www.newshosting.com
Date	2025-03-19 01:30 -0500

Cross-posted to 2 groups.

Show all headers | View raw

On Tue, 18 Mar 2025 21:12:43 +0100, "R.Wieser" <address@is.invalid>
wrote:

>Newyana2,
>
>>>> and that you can't block them in HOSTS?
>>>
>>> *Ofcourse* you can !  You just won't like being cut off from a large(?)
>>> number of websites. :-) :-(
>>
>> Try it. It doesn't work. That's because there's no DNS call.
>
>I would like you to post a link to such a webpage so I can try, as what you 
>are telling me does not make any sense to me.
>
>There is *no* situation where a webpage or any of its resources can live on 
>Akamai's servers, but no DNS call by my browser to resolve Akamai's domain 
>is made.

If I'm understanding correctly, my colleagues and I are asked to set up
that exact thing on a regular basis. Look at it this way, when you do a
DNS lookup for a specific domain, there's no guarantee, nor should there
be any expectation, that the IP address in the DNS response physically
lives on a server owned by that domain, or is located at a facility
owned by that domain. That's how you can end up using Akamai equipment,
or one of the others, even though you've not seen a DNS request for
Akamai.

Quite frequently these days, the IP address in the DNS response is
configured on a (usually virtual) load balancer, where the load balancer
and the servers in the various pools behind it are all located at one of
the big CDNs, such as CloudFlare, Amazon Web Services (AWS), Akamai,
etc. Certain kinds of traffic can contain clues that you've actually
been serviced by a CDN, but not always.

Related to that, we configure the DNS response to be dynamic, so that
from one response to the next, we always provide the "nearest available"
resource, where nearest more properly means the load balancer with the
fastest response, which automatically weeds out resources that are
temporarily unavailable, overloaded, geo restricted, etc.. Of course,
that also implies that our DNS is performing health checks on each
potential resource, because otherwise how would it know what to respond
with. It sounds more complicated than it is.

If you guys were talking about something else, please disregard.

>... other than that Akamai doesn't use a domain name, but a hard-coded IP 
>instead.  And thats a trick I've seen last quite a few years ago.

We don't do it that way, especially for public web sites, but I can't
speak for everyone.

>.. or the "pass thru" (both ways) is performed in-and-by the origional 
>website - wich would make a joke of any DDOS (or similar) mitigation Akamai 
>might offer.

We do some limited transparent traffic steering within an organization,
when requested, but we don't do it over the Internet and I haven't seen
anyone else do it. If a customer asked me to do it, I'd have a lot of
questions as to why. When they explain what they're trying to achieve, I
can sometimes suggest a different or better way.

Thread

CloudFlare is blocking smaller browsers Sailfish <NIXCAPSsailfish@NIXCAPSunforgettable.com> - 2025-03-16 05:47 -0700
  Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-16 15:14 +0100
  Re: CloudFlare is blocking smaller browsers John McCue <jmccue@qball.jmcunx.com> - 2025-03-16 14:24 +0000
  Re: CloudFlare is blocking smaller browsers D <noreply@mixmin.net> - 2025-03-16 14:32 +0000
  Re: CloudFlare is blocking smaller browsers Newyana2 <newyana@invalid.nospam> - 2025-03-16 11:36 -0400
    Re: CloudFlare is blocking smaller browsers ant@zimage.comANT (Ant) - 2025-03-17 01:19 +0000
      Re: CloudFlare is blocking smaller browsers Daniel70 <daniel47@eternal-september.org> - 2025-03-17 19:22 +1100
        Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-17 10:55 +0100
          Re: CloudFlare is blocking smaller browsers "Carlos E.R." <robin_listas@es.invalid> - 2025-03-17 13:19 +0100
            Re: CloudFlare is blocking smaller browsers Andy Burns <usenet@andyburns.uk> - 2025-03-17 12:43 +0000
            Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-17 14:27 +0100
              Re: CloudFlare is blocking smaller browsers "Carlos E.R." <robin_listas@es.invalid> - 2025-03-17 20:04 +0100
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-17 20:59 +0100
                Re: CloudFlare is blocking smaller browsers "s|b" <me@privacy.invalid> - 2025-03-17 21:20 +0100
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-18 07:40 +0100
                Re: CloudFlare is blocking smaller browsers Newyana2 <newyana@invalid.nospam> - 2025-03-18 08:39 -0400
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-18 15:43 +0100
                Re: CloudFlare is blocking smaller browsers Newyana2 <newyana@invalid.nospam> - 2025-03-18 15:29 -0400
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-18 21:12 +0100
                Re: CloudFlare is blocking smaller browsers Newyana2 <newyana@invalid.nospam> - 2025-03-18 18:52 -0400
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-19 08:28 +0100
                Re: CloudFlare is blocking smaller browsers Char Jackson <none@none.invalid> - 2025-03-19 01:30 -0500
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-19 08:08 +0100
                Re: CloudFlare is blocking smaller browsers Char Jackson <none@none.invalid> - 2025-03-19 02:49 -0500
                Re: CloudFlare is blocking smaller browsers Newyana2 <newyana@invalid.nospam> - 2025-03-19 08:39 -0400
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-19 14:20 +0100
                Re: CloudFlare is blocking smaller browsers News <news@triffid.co.uk> - 2025-03-18 07:30 +0000
                Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-18 09:10 +0100
          Re: CloudFlare is blocking smaller browsers Daniel70 <daniel47@eternal-september.org> - 2025-03-18 00:10 +1100
            Re: CloudFlare is blocking smaller browsers "R.Wieser" <address@is.invalid> - 2025-03-17 14:32 +0100
              Re: CloudFlare is blocking smaller browsers R Daneel Olivaw <Danni@hyperspace.vogon.gov> - 2025-03-17 15:37 +0100
            Re: CloudFlare is blocking smaller browsers "s|b" <me@privacy.invalid> - 2025-03-17 21:22 +0100
          Re: CloudFlare is blocking smaller browsers micky <NONONOmisc07@fmguy.com> - 2025-03-25 01:57 -0400
            Re: CloudFlare is blocking smaller browsers "Carlos E.R." <robin_listas@es.invalid> - 2025-03-25 20:25 +0100
              Re: CloudFlare is blocking smaller browsers micky <NONONOmisc07@fmguy.com> - 2025-03-25 20:35 -0400
      Re: CloudFlare is blocking smaller browsers R Daneel Olivaw <Danni@hyperspace.vogon.gov> - 2025-03-17 13:02 +0100
        No RCEs to see here [was: Re: CloudFlare is blocking smaller browsers] Dirk Fieldhouse <surname@gmx.net.plusremovethisandtherest.example.com> - 2025-03-17 13:50 +0000
          Re: No RCEs to see here [was: Re: CloudFlare is blocking smaller browsers] ant@zimage.comANT (Ant) - 2025-03-17 18:24 +0000
        Re: CloudFlare is blocking smaller browsers Chris Elvidge <chris@internal.net> - 2025-03-17 22:09 +0000
  Re: CloudFlare is blocking smaller browsers VanguardLH <V@nguard.LH> - 2025-03-16 12:26 -0500
  Re: CloudFlare is blocking smaller browsers not@telling.you.invalid (Computer Nerd Kev) - 2025-03-17 08:12 +1000
  Re: CloudFlare is blocking smaller browsers User One <noreply@invalid.com> - 2025-03-16 22:37 +0000
    Re: CloudFlare is blocking smaller browsers "s|b" <me@privacy.invalid> - 2025-03-17 21:18 +0100
  Re: CloudFlare is blocking smaller browsers ant@zimage.comANT (Ant) - 2025-03-17 01:18 +0000
    Re: CloudFlare is blocking smaller browsers Dirk Fieldhouse <surname@gmx.net.plusremovethisandtherest.example.com> - 2025-03-17 14:05 +0000
  Re: CloudFlare is blocking smaller browsers "David E. Ross" <nobody@nowhere.invalid> - 2025-03-17 13:45 -0700

csiph-web