Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 18-Nov-2025 22:52:00 JST Kevin Beaumont

   Hour two of the Cloudflare outage, Mastodon retry queue at record length and failed attempts at highest amount on record too.

   • Embed this notice
     Andrew Golding (huronbikes@cyberplace.social)'s status on Tuesday, 18-Nov-2025 23:14:26 JST Andrew Golding

     in reply to

     @GossiTheDog incoming euro-pop song about Cloudflare?

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 18-Nov-2025 23:16:38 JST Kevin Beaumont

     in reply to

     Wild, entering hour three and still seeing sites down and about 40% failure rate on Mastodon Sidekiq queue requests.

     Mx Jay Baker repeated this.
   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 18-Nov-2025 23:47:02 JST Kevin Beaumont

     in reply to

     Fun factor, if you google booter services (DDoS services), almost every major one is a Cloudflare customer. So currently, by anti-DDoS provider Cloudflare being offline, the world is a safer place.

     Rich Felker repeated this.
   • Embed this notice
     Jérôme Meyer (jmeyer@infosec.exchange)'s status on Tuesday, 18-Nov-2025 23:49:22 JST Jérôme Meyer

     in reply to

     @GossiTheDog Sadly, already over, like a beautiful rainbow in the storm https://infosec.exchange/@jmeyer/115571243852832673

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 18-Nov-2025 23:54:26 JST Kevin Beaumont

     in reply to

     Cloudflare says it is resolved, and my Mastodon server queue is clearing now... so prepare for DDoS to resume, since their DDoS botnet customers are back online.

   • Embed this notice
     Jérôme Meyer (jmeyer@infosec.exchange)'s status on Tuesday, 18-Nov-2025 23:55:36 JST Jérôme Meyer

     @GossiTheDog Might be location-dependent — haven't had an error message since

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 18-Nov-2025 23:58:50 JST Kevin Beaumont

     in reply to

     Here's the 6 month Mastodon Sidekiq track, you'll see the highest amount of failures on the far right today in red - that was the Cloudflare outage.

     Hopefully it encourages more #mastoadmin to consider if Cloudflare is a good choice.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 19-Nov-2025 00:09:16 JST Kevin Beaumont

     in reply to

     17 hours from now, somebody will reply to this thread saying 'It's not down, works for me'. Always happens. I love the internet.

   • Embed this notice
     Paul Cantrell (inthehands@hachyderm.io)'s status on Wednesday, 19-Nov-2025 03:56:50 JST Paul Cantrell

     in reply to

     • Tiota Sram

     @GossiTheDog @tiotasram
     “First we’ll poison you, then we’ll sell you the antidote”

   • Embed this notice
     Marcus Adams (gerowen@mastodon.social)'s status on Wednesday, 19-Nov-2025 15:19:29 JST Marcus Adams

     in reply to

     • Christoffer S.

     @nopatience @GossiTheDog Cloudflare offers DDoS protection. Anubis is just a local reverse proxy so it'll stop scrapers and bots, but it won't stop somebody just flooding your connection with useless traffic until it stops responding. But this is what, the 3rd or 4th time in just the last year or so that large swaths of the internet have gone down because of Cloudflare, so one site here and there going down to DDoS is arguably preferable to everybody being centralized.

   • Embed this notice
     Fernando (fsjr@mastodon.social)'s status on Wednesday, 19-Nov-2025 15:19:29 JST Fernando

     in reply to

     • Marcus Adams
     • Christoffer S.

     @gerowen @nopatience @GossiTheDog Not nice when it's my website, and I would like it to stay up and also not have an insane bandwidth bill.

     Everybody saying "JUST STOP USING CLOUDLFARE OMG LOL YOU IDIOT" isn't really considering the needs of folks running smaller sites, having less experience or a smaller budget trying to keep their little site online.

     Major "why don't you just buy a huge operation to run your little website like the large company I work for does?" vibes. All of you.

   • Embed this notice
     Christoffer S. (nopatience@swecyb.com)'s status on Wednesday, 19-Nov-2025 15:19:31 JST Christoffer S.

     in reply to

     @GossiTheDog I'm seeing the same thing, several orders of magnitude more retries than usual.

     Why? I mean... how could many small instances possibly need "protection" from Cloudflare? C'mon the fuck on.

     Get something like Anubis (https://github.com/TecharoHQ/anubis) and be done with it.

     Cloudlare? ...Shsszz...

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 19-Nov-2025 16:08:49 JST Kevin Beaumont

     in reply to

     Cloudflare RCA is out.

     Basically a few things went wrong which then hit a coding error. https://blog.cloudflare.com/18-november-2025-outage/

   • Embed this notice
     daniel:// stenberg:// (bagder@mastodon.social)'s status on Wednesday, 19-Nov-2025 16:13:08 JST daniel:// stenberg://

     in reply to

     @GossiTheDog but it was memory-safe! 😎

   • Embed this notice
     Dante Vortex 💾 (dantevortex@cyberplace.social)'s status on Wednesday, 19-Nov-2025 18:50:44 JST Dante Vortex 💾

     in reply to

     @GossiTheDog

     The biggest question I got is why they didn't find out during the standard OTAP procedure they "allegedly" are following like a professional company would.

   • Embed this notice
     𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 (netresec@infosec.exchange)'s status on Wednesday, 19-Nov-2025 21:20:59 JST 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲

     in reply to

     • da_667

     @da_667 @GossiTheDog From https://urlhaus.abuse.ch/statistics/

   • Embed this notice
     da_667 (da_667@infosec.exchange)'s status on Wednesday, 19-Nov-2025 21:21:00 JST da_667

     in reply to

     @GossiTheDog Many different types of malware campaigns use cloudflare. Many fake search engine ad campaigns, click-fix and various other malware campaigns have C2s or distribution servers on cloudflare

     Kevin Beaumont repeated this.
   • Embed this notice
     Dante Vortex 💾 (dantevortex@cyberplace.social)'s status on Thursday, 20-Nov-2025 02:25:06 JST Dante Vortex 💾

     @GossiTheDog

     Sorry that was a Dutch thing,

     It's the "Development(Ontwikkel), Test. Acceptance, Production"

     But I already learned this was a bug that's been in the code for a longer time and for some reason it just happened to show up right now.