Cloudflare and Xenforo? (Any better alternatives?)

Fleur said:
We are just happy customer of Incapsula and while we do recommend this service,
We request that you look at their security offerings before buying into Incapsula and make an informed decision.

If Incapsula do fail or lapse on their services, we will just move on and find another security provider to replace Incapsula without notice.
Click to expand...

For $60 mth, I think most hosting providers would have a hardware/dedicated firewall and security device available. Did you consider this option also?
 
We did.

The problem wasn't Incapsula. The problem itself is hardware firewall does not filter spammers, SQL attacks, 0 (Zero) day PHP exploits.

For that, hardware firewalls have little or no defense :(
 
Mouth said:
For $60 mth, I think most hosting providers would have a hardware/dedicated firewall and security device available. Did you consider this option also?
Click to expand...
Incapsula is a little on the costly side, but they do manage attacks better and make for a good domain proxy. Setup is easier, but most importantly so is switching host. I simply log into Icapsula and tell it the new IP address anytime I move.
 
RickM said:
TBH I've just disabled cloudflare, it's really gone down hill over the last few months. I'm pretty sure they were intentionally showing the 'site offline' page, smothered with their ads whenever they wanted. I'd visit my site several times a day, and it'd be reported as offline. Server loads were fine, DNS was fine, etc, the second I turn cloudflare off, the site works again.

That combined with their stupidly weak DNS system (as proved by the complete outage not long ago) was the final straw for me. Moved away and our earnings are up, analytics is showing better performance, etc.
Click to expand...
I have been seeing similar issues.
 
I am not sure why every one is after CDNs and cloudflare and incapsula and what not. Nothing beats a solid piece of hardware placed right amongst your target audience. I see some people have websites that purely target USA and they want a CDN so some one in Newyork can load a page 12ms faster? You guys need to stop reading advertisements honestly.

A good responsive server with fast drives and cached content on RAM with good network connectivity is all you need. You cannot compensate for your own poor hardware or network by using cloudflare or xyz.
 
And I see servers in USA and Europe are dirt cheap. A box with similar specs costs me about 4 times more in India and I pay for it and dont use a CDN purely because those websites are only targeted to India and a CDN with my server located in Singapore will never be as good as a server without a CDN placed right in the centre of India from where latency to any part of India is less then 25ms and no CDN can beat that especially when you have a solid processor and super fast drives.

I would be very happy to believe otherwise if some one can make me understand how a CDN would be of any help atall.
 
Hi

I`m sorry but I`m not sure you know what Incapsula does.

CDN is just something that we use, not what we are.

Our true goal is to provide affordable security.
The CDN reverse proxy is only a delivery platform which allows us to monitor traffic and prevent threats on 'edge' - before they hit client's site/server .
At the same time, we use Cloud to integrate such solutions as: Bot profiling, Web Application Firewall, Backdoor detection and recently even 2FA service - which you can deploy on any part of your site, without any coding or DB tinkering.
Best of all - because we deliver via Cloud - we can provide all of these for an 'economy of scale' costs, offering enterprise-grade solutions for mid-market prices.

The CDN related acceleration benefits are almost a "bonus".
Still, even in that respect, we offer unique dynamic caching algorithms and optimization features, which are used to significantly augment our hardware solutions.

Finally, we have +350Gbps capacity for DDoS attacks, which we use in combination with other security services (i.e. our scrubbing algorithms)...
Consider how much it would cost to setup/manage a network like that.
Assuming this is even possible. :)

Having said all that, if you are a company with Global presence, managing 15 multi-gig pops on 4 different continents is probably not as cost-effective as 3rd party managed service, which will also cover failover, load balancing, etc.
 
We have been using EdgeCast CDN for a while, of course its a bit more pricier than MaxCDN, but you get quality service.
 
Read the original post. We host on SSD and Core i5 Xeon platform.


We get around a hack-attack every week. Last month it was zero-day attacks to PHPMySQLAdmin, stupid Plesk vulnerabilities, PHPBB vulnerability attacks, more than 50,000 comment spammers hamming our site on a monthly basis.


Personally I would rather have some security options and sleep well rather than wake-up and get some spyware or trojan upload on the forum.
 
BTW, and this is just an interesting anecdote, our 'wildcard' security rules blocked Plesk RFI from the get-go.
After it was published this Jun, we did some backtracking and saw 1st blocking events in early February so it wasn't exactly as Z-day as media would have you believe :)
 
The Plesk attacks you're seeing are probably just scanner bots that are running around, trying to find an opening.
We still see a lot of TimThumb scanners - now they have some new friends... :)

Also, I see your point about the extra sites. If you have multiple domains or/and are willing to consider prolonged commitment you can always reach out via contact form to discuss a bulk deal (something that we do quite a lot).
Personally I think that filtering 50K spam comments alone is worth a 20$, but I`m obviously bias.
 
Not blind at all :) We recently changed our policy. Now there are only 'soft limits' - unlimited bandwidth consumption, assuming it's within reasonable bounds.
 
Igal Zeifman said:
assuming it's within reasonable bounds.
Click to expand...
Which would be? Thats one thing I hate about fake "unlimited" services - they vaguely say "oh its unlimited, but if you really do take the piss we'll have to enforce limits" - with no definition of what those limits are.

If the offering is something along the lines of "Unlimited Bandwidth (*capped at 5TB)" then its not unlimited bandwidth at all. It's just very high bandwidth.
 
Igal Zeifman said:
Not blind at all :) We recently changed our policy. Now there are only 'soft limits' - unlimited bandwidth consumption, assuming it's within reasonable bounds.
Click to expand...
interesting what's reasonable now ? i am on incapsula biz plan which had 1TB/month before, so not sure what is reasonable now ?

btw, got a database error on incapsula site pricing page, messaged you the specifics
 
Fair question.
Currently we have a soft limit of several TB a month.
If you go beyond that we will reach out and work together on a solution.
(BTW. We never dropped any site for going over bandwidth limits or auto-billed it for overages - even before this new policy.)

Also, I 100% agree on you second point.
IMO "Unlimited" should not be take literally. (this is like saying 'Infinity'... means nothing really)
Over time I saw many companies, who actively advertise "Unlimited" usage, off-board clients for reaching some transparent and undeclared limit...
I hate that.
This is exactly why we don't mention "Unlimited" in our Pricing and Plans page (http://www.incapsula.com/pricing-and-plans/compare-all-plans)
We don't want to use Big Word to lure people in with marketing fluffs. :)
 
Back
Top Bottom