Beatbump icon indicating copy to clipboard operation
Beatbump copied to clipboard

pls dont use cloudflare

Open hxvy0 opened this issue 2 years ago • 11 comments

pls dont use cloudflare due privacy. or suggest a non-cloudflare istance

hxvy0 avatar Aug 22 '22 17:08 hxvy0

pls dont use cloudflare due privacy. or suggest a non-cloudflare istance

@Esmailelbobdev2 does your instance use cloudflare? If it does it should be possible for someone else to host a non-cloudflare instance

davidcollini avatar Aug 22 '22 18:08 davidcollini

The primary reason the main official instance uses Cloudflare (for both reverse proxy, as well as Cloudflare workers) is because it's free/dirt cheap and is fast, and is pretty trustworthy in my near two years' experience with them (some folks may feel differently, which is fine of course), while also reducing some of the issues involving geo-blocking.

I'm working on a way to put third-party instances of Beatbump into focus, via the in-app settings and maybe a portal-page that will link to other instances & provide relevant privacy notices.

It will take time of course since there's a lot to juggle with Beatbump, but I can assure you I'm working on it!

snuffyDev avatar Aug 22 '22 18:08 snuffyDev

@IronMaltese who shall awaken me from my sleep with mentions (joking, feel free to mention)


Nope! I do not use Cloudflare at all. I rely on Kimsufi's DDoS mitigation (https://www.kimsufi.com/us/en/about-ks/index.xml#protection) so if my server DDoSed. Well, it's OVH's problem

EsmailELBoBDev2 avatar Aug 23 '22 08:08 EsmailELBoBDev2

some folks may feel differently, which is fine of course

@snuffyDev I love cloudflare but as CDN, but let's face it. The whole company business model is to log IPs and for me, I hate them for that.

It's like working as a thief, sure it's a job, and it has business model, but it does not change the fact it's bad one!

EsmailELBoBDev2 avatar Aug 23 '22 08:08 EsmailELBoBDev2

@IronMaltese who shall awaken me from my sleep with mentions (joking, feel free to mention)

Nope! I do not use Cloudflare at all. I rely on Kimsufi's DDoS mitigation (https://www.kimsufi.com/us/en/about-ks/index.xml#protection) so if my server DDoSed. Well, it's OVH's problem

Which one of you is doing it :eyes: https://social.esmailelbob.xyz/@esmail/108890509916877145

EsmailELBoBDev2 avatar Aug 26 '22 18:08 EsmailELBoBDev2

esmail el bob's istance not working.

hxvy0 avatar Aug 29 '22 15:08 hxvy0

@hxvy0 next time mention :-P

I can't test it on my end as in both cases beatbump is blocked for me haha! so can someone confirm please songs does not play (only) in my instance, thanks

EDIT: Nevermind, updated it and now it should work. thanks for the heads up

Edit of edit: nope after update still no luck, I will try to build from docker instead pull already built image

Edit of edit of edit: okay now updated and as used to be some songs play (luckily enough it's my fav singer and he is Ed sheeran) so I think we are back to normal? can you confirm songs play now?

EsmailELBoBDev2 avatar Aug 31 '22 09:08 EsmailELBoBDev2

@snuffyDev I'm confused I use docker.io/snuffydev/beatbump and I feel it's still outdated...

UPDATE: oh my god I just noticed there is docker compose file within git repo I thought you still use beatbump docker-compose repo :joy:

EsmailELBoBDev2 avatar Aug 31 '22 23:08 EsmailELBoBDev2

I'm working on a way to put third-party instances of Beatbump into focus, via the in-app settings and maybe a portal-page that will link to other instances & provide relevant privacy notices. -- @snuffyDev (https://github.com/snuffyDev/Beatbump/issues/93#issuecomment-1222778975)

FWIW I use LibreRedirect so if you know about any 3rd party instance then contribute them to https://github.com/libredirect/libredirect/blob/master/src/instances/beatbump.json

But functionality like https://instances.invidious.io would be great.. Ideally one that does the transfer transparently each time instance goes down so that it's basically seemless federated network

..It also flags Cloudflare instances so they are easy to disable 2022-09-02_12-09


FWIW2: I as a privacy and security advocate I am not aware of a good reason to not use cloudflare if it's DDoS gate (that is constantly ruining my life on onion-routing with randomized fingerprint browser) is disabled as it won't allow any user that it can't fingerprint through.. Personally the only useful usecase for me to use the cloudflare gate is to make sure that my setup is set correctly :sweat_smile: and i wouldn't recommend it to anyone who wants DDoS management as it's evidently a huge Man-In-The-Middle spyware.

Relevant: https://github.com/snuffyDev/Beatbump/issues/58

Kreyren avatar Sep 02 '22 10:09 Kreyren

Update: working on this. Just trying to find a Workers-like platform with decent pricing. Working on migrating to BunnyCDN/DNS

snuffyDev avatar Aug 06 '23 15:08 snuffyDev

The biggest blocker atm is hosting. I could use a VPS like Vultr, but that has the potential to cost more overall than I would want to pay.

Break down of the numbers: image

  • Currently Beatbump serves ~70-120GB of data a month
  • Beatbumps new (unreleased) rewrite / update has the ability to proxy audio streams. Therefore that 70 to 120 GB per month could easily skyrocket into multiple terabytes, considering how much media band with uses.
  • Assuming that more people use the service once everything is all said and done, the base amount of bandwidth could grow by double or triple very quickly
  • Factoring that in- if theoretically, more people are using the service and listening to songs and streaming more, then that just further increases the amount of bandwidth cost - that's the bottleneck

Not to mention considering the amount of international usage people like seeing localized content if I'm in India, I want to see India. I don't want to see the United States so that's another additional issue

snuffyDev avatar Aug 06 '23 15:08 snuffyDev