It looks like the CDN files.mastodon.online for #MastodonOnline is currently broken and redirecting everything to https://(null)/ from files.mastodon.online.
If you're wondering why some pictures and media aren't loading right now, this is why.
When I first joined Twitter a lifetime ago, I only followed people in my own community.
Not sure when or how that changed, but along the way my idea of community changed and I'm glad and grateful that it did.
An interesting journey that I've appreciated immensely.
That said, with the demise of angrybirdsite, I'd like to find a few more #yyc#ab#cdn friends again.
A little help would be appreciated. 😊
@selea firstly, you have a very good point! i hope to have some answers, but also i feel like i need to make the problem even harder first:
as commonly set up, cf and other #cdn based "solutions" only work because current #ddos attacks are sufficiently dumb. if attackers were better informed, used a little more recon and directed attacks at the origin, they would be, in many cases, useless. we should consider ourselves lucky, and not much else.
regarding alternatives … 🧵
As folks might know, I #MastoAdmin the #FediverseAU#Mastodon instance, which is a closed (must be approved) instance only for university and research group accounts in Australia / Oceania - because they're typically brand accounts and don't have a natural home in AU.
Yesterday I upgraded the storage for this Mastodon instance, and placed it on a #DigitalOcean#CDN.
If you're interested in this sort of thing, you can see the change plan here - because documentation is both helpful in the moment, and a good reference for others.
All I want is a CDN that's also private in a way that I don't need to include any US entities on the list of sub processors. I guess bunny.net is not on the list 🔓
How and why did Wikipedia became a multi-datacenter deployment?
This is an introduction post chronicling our seven-year journey, the MediaWiki infrastructure improvements made along the way, and the reasons/benefits for each change.
Import maps, the new browser standard, open up a world of possibilities for factoring and optimizing web pages and experiences. In this post, we explore one of them briefly: developing a static import-map-based #CDN to serve your #NPM packages. (https://bennypowers.dev/posts/import-map-cdn/)
Yesterday I added a graph to track TLS ciphersuite usage over time & immediately spotted an anomaly.
In mid-Feb, on our commercial CDN, CHACHA usage dropped from ~10-12% to ~0.5% & stayed there. The same did not happen on our own CDN so it seemed unlikely to be client behaviour.
Raised it with the CDN vendor & they tied it to a release which accidentally changed the behaviour to pref CHACHA for clients for whom CHACHA is top pref.
Having good data is 💯 #TLS#CDN#Grafana#webStats
This threat will grow over time if nurtured with regular watering and bright, indirect sunlight
Sorry, I mean this threat will grow. The threat landscape of 2030 won't be what it is in 2022, which isn't what it was in 2010.
Let's dive right in before setting the stage or mixing metaphors:
Where should you start in thinking about CDN security? #CDNSecurity#CDN#InfraSec#ThreadModeling