kolp
Joined 11 years ago
Joined 11 years ago
My use case was for remote access into a home-hosted Nextcloud instance, via an ISP supplied fibre router (IPv4, not CGNAT), then my own Gl iNet router, then to my Nextcloud instance.
Despite opening up port forwarding correctly, wireguard just couldn't get through that chain, whereas tailscale got through with no problems.
Downside of using tailscale is that it's messy to use at the same time as a VPN on your client device. Split tunnelling supposedly works, but I couldn't get it going.
The other side of the social contract obliges passers-by to not look inside.
The other strange thing that I found is that some apartments have little spy mirrors mounted on the exterior wall to allow the occupants to monitor what's going on in the street.
You'll probably need to block entire ASNs. I assume most of your legitimate customers aren't using VPNs or eg DigitalOcean droplets to access your site.
https://webagencyhero.com/cloudflare-waf-rules-v3/
In addition, you should start looking for alternatives to PayPal in case they decide to drop you.
I've started switching a few sites from Cloudflare to Bunny and the experience has been great so far. Bunny offers custom name servers as well, so if you can setup glue records with your domain registrar, it's easy enough to have custom nameservers, DNS and CDN hosted with Bunny. Cheap as chips and great performance so far.
I'm looking for a decent alternative to ReCaptcha or Turnstile but haven't found one yet that has easy integration (form builders etc.)
My move away from US providers isn't in protest - it's just risk avoidance. The unpredictable nature of the current administration reduces the attractiveness of using US based providers.
Irish government has banned purchases of military equipment from Israel, but the ban doesn't extend to purchases by the police force.
"Why is the system down?"
"Dave pushed the updates to the production server again."
"F*king gobshite."
Gobdaw is a less offensive variation, typically used by those who say fe_k instead of fu_k.