Discussion
Loading...

Post

  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Neil Brown
@neil@mastodon.neilzone.co.uk  ·  activity timestamp 3 days ago

I'm not judging anyone for not self-hosting. Self-hosting is not a panacea.

It would be a pain if both our primary and backup Internet connections went down, or there was a problem at A&A's end. If A&A ceased, I'd be rather stuck.

Everything would stop running if we have a power outage which outlasts my UPSs, before I could rush and start the generator.

If our home blew up, or burglars decided that the best thing to take was a massive locked rack full of aged cheap computers, it would cause me a problem while I reinstated things.

All of these are possibilities, and I do what I can to mitigate against them.

But at least it would just be *my* things.

  • Copy link
  • Flag this post
  • Block
Paul
@pwaring@social.xk7.net replied  ·  activity timestamp 3 days ago

@neil I think safety in numbers is under-appreciated, both for backside-covering and also people aren't going to assume you've been hacked if everyone else is down, whereas they will if you're the only one (and it's pretty difficult to prove that you've *not* been hacked).

  • Copy link
  • Flag this comment
  • Block
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 3 days ago

@pwaring Exactly.

  • Copy link
  • Flag this comment
  • Block
Jesse
@jesse@chaos.social replied  ·  activity timestamp 3 days ago

@neil @pwaring
Isn't this just the new version of "no-one was ever fired for buying IBM"?

If you choose the dominant market player, and stuff goes south: "you can't blame me, it was general consensus that this was the thing to do"

If you choose to self-host, and anything at all goes even slightly wrong: "this wouldn't have happened if we had just gone with [insert relevant monopoly company]"

  • Copy link
  • Flag this comment
  • Block
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 3 days ago

@jesse @pwaring Yes, a very similar ethos, I think.

  • Copy link
  • Flag this comment
  • Block
Rachel Barker
@rachelplusplus@tech.lgbt replied  ·  activity timestamp 3 days ago

@neil I've seen this happen a few times, to the point I wonder if there's some kind of statistical law: that beyond a certain point, you run out of ability to reduce risk on average. After that, you can only shape whether you have a high rate of low-impact issues, or a low rate of high-impact issues.

And it does seem that way too much of the time, people just see "low rate of issues" and push for that, eventually leading to massive correlated failures

  • Copy link
  • Flag this comment
  • Block
Emily_S
@emily_s@mastodon.me.uk replied  ·  activity timestamp 3 days ago

@rachelplusplus @neil always assumed that was a function of practice. Regular low stakes issues to get good at incident response means the big stuff isn't so big because everyone knows what to do.

  • Copy link
  • Flag this comment
  • Block
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 3 days ago

@rachelplusplus Ooh, interesting.

  • Copy link
  • Flag this comment
  • Block
Mans R
@mansr@society.oftrolls.com replied  ·  activity timestamp 3 days ago

@neil The average availability of most of these services is likely still much higher than they'd be able to manage on their own.

  • Copy link
  • Flag this comment
  • Block
Alan
@ReCyclist@toot.community replied  ·  activity timestamp 3 days ago

@neil It's the business model that says "let's bet the house on the internet", but then outsource and consolidate infrastructure because I can get rid of staff and don't have to buy hardware or run a data centre.

Then be surprised when some third party bit breaks and all trading stops.

  • Copy link
  • Flag this comment
  • Block
Matt Panaro
@eigen@mattstodon.panar.ooo replied  ·  activity timestamp 3 days ago

@neil I said the same thing (about "safety in numbers") when CrowdStrike shattered Windows last year, so I'm glad someone else made the same observation🙂

  • Copy link
  • Flag this comment
  • Block
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 3 days ago

I'm not judging anyone for not self-hosting. Self-hosting is not a panacea.

It would be a pain if both our primary and backup Internet connections went down, or there was a problem at A&A's end. If A&A ceased, I'd be rather stuck.

Everything would stop running if we have a power outage which outlasts my UPSs, before I could rush and start the generator.

If our home blew up, or burglars decided that the best thing to take was a massive locked rack full of aged cheap computers, it would cause me a problem while I reinstated things.

All of these are possibilities, and I do what I can to mitigate against them.

But at least it would just be *my* things.

  • Copy link
  • Flag this comment
  • Block
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 3 days ago

I have had no reason - yet, anyway - to put anything I host behind someone else's reverse proxy.

Perhaps that day will come, although I very much hope not, because wow things would need to have gone badly wrong.

  • Copy link
  • Flag this comment
  • Block
Simon Hewison
@zymurgic@mastodon.online replied  ·  activity timestamp 3 days ago

@neil you also have the benefit of having a website that serves content efficiently. Those who just throw up Wordpress with fancy plugins and themes, ever convoluted object caches, page caches and third party forward proxies are those that probably need those forward proxies to avoid it spewing hundreds of megabytes with every page (even to gibberish queries) killing the server's cpu and I/O.

  • Copy link
  • Flag this comment
  • Block
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 3 days ago

@zymurgic

> you also have the benefit of having a website that serves content efficiently

Yes, that was absolutely a design decision that I made.

  • Copy link
  • Flag this comment
  • Block
ahnlak
@ahnlak@kavlak.uk replied  ·  activity timestamp 3 days ago

@neil it has been, annoyingly, very useful at blocking some very dedicated AI scrapers hitting a couple of my sites - and although I *could* do it at the web hosting end, it's a lot more complicated (partially because I'm not running the web server myself)

The positives are rapidly dropping below the negatives, however

  • Copy link
  • Flag this comment
  • Block
tiddy roosevelt
@babe@glitterkitten.co.uk replied  ·  activity timestamp 2 days ago

@ahnlak @neil Seeing the large amount of bots that have been targeting my site for a good while eventually got me over my revulsion for them (although I was damn near chewing grit as I did it). The sheer number about now is alarming

  • Copy link
  • Flag this comment
  • Block
John Francis 🦫🇨🇦🍁💪⬆️
@johnefrancis@cosocial.ca replied  ·  activity timestamp 3 days ago

@neil nerd burglars! They steal the #Homelab rack, any nice fiber or cat6a, and desolder all the rare chips and gold pins found in any electronic devices. They leave all the jewelry behind except cheap industrial white sapphires, those are cool.

  • Copy link
  • Flag this comment
  • Block
Dan Sugalski
@wordshaper@weatherishappening.network replied  ·  activity timestamp 3 days ago

@neil The worst part about the cloudflare outage is that even if you *are* self-hosting you may still be fronted by cloudflare as it's the only well-known free/affordable way to either fend off the AI bot swarm or expose a behind-the-firewall service to the outside.

I'm using Cloudflare's free tunneling service and got burned by this but I don't know that there's any alternative (and setting that up myself is both even more work/expense and also more hassle and annoyance, which sucks)

  • Copy link
  • Flag this comment
  • Block
Mythic Beasts
@beasts@social.mythic-beasts.com replied  ·  activity timestamp 3 days ago

@wordshaper @neil we had to drop support for customers fronting their sites with CloudFlare on our shared servers because it's not effective at stopping the AI bot swarm, and using it makes it impossible for us to do so ourselves. https://www.mythic-beasts.com/blog/2025/09/03/web-hosting-and-cloudflare/

  • Copy link
  • Flag this comment
  • Block
Flic
@Flisty@mstdn.social replied  ·  activity timestamp 3 days ago

@neil I think I agree, although I would argue that part of the point of reliability is to be up when others are not, though...

  • Copy link
  • Flag this comment
  • Block
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 3 days ago

@Flisty

> part of the point of reliability is to be up when others are not, though

It might depend on one's perspective, I think.

The goal of reliability might be to be up to continue making money, to avoid being in breach of SLAs (if there is a penalty attached to them) and to avoid reputational damage.

And sometimes the cost/benefit analysis sides with "meh, that's reliable enough for our needs".

  • Copy link
  • Flag this comment
  • Block
Flic
@Flisty@mstdn.social replied  ·  activity timestamp 3 days ago

@neil fair. Linked: I think M&S/Co op's reputations were rescued somewhat by suffering from an attack at the same time. It made it bigger news and helped people understand why their online shopping was down/stock was unreliable etc.

  • Copy link
  • Flag this comment
  • Block
Log in

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.0 no JS en
Automatic federation enabled
  • Explore
  • About
  • Members
  • Code of Conduct
Home
Login