based cloudflare

    • tekato@lemmy.world
      link
      fedilink
      English
      arrow-up
      31
      arrow-down
      1
      ·
      6 hours ago

      Cloudflare blocks VPNs at the request of whoever is running the server. There are tons of websites running on Cloudflare that work with VPNs.

      • Dr. Moose@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        36 minutes ago

        Nope. Cloudflare use a complex set of fingerprinting tools that determine security scores. It’s literally social credit system for web user agents and the site admits have little control over that.

      • IphtashuFitz@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        edit-2
        3 hours ago

        Exactly. My employer uses Akamai, which is larger than Cloudflare. Akamai provides the ability to block traffic from Tor, traffic from VPNs, traffic from any countries you desire, and so on. They also provide managed lists of countries listed in things like ITAR so you can easily block them if you want.

      • moseschrute@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        6 hours ago

        There are also many Lemmy instances that are intentionally blocking VPNs because they have to to stay afloat.

    • AmbiguousProps@lemmy.today
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      5 hours ago

      I’m using a VPN with my cloudflare reverse proxies right now. That blocking is configured by the website owners, not Cloudflare.

    • MangoPenguin@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      1
      ·
      edit-2
      6 hours ago

      For what it’s worth when you set up your site on cloudflare you get to choose how strict you want security to be and what URLs it applies to, or just disable it and use it only as a CDN. Or even disable routing entirely and use it only as your DNS.

      It would be nice if they were more clear that enabling some features might block legitimate users though.