this post was submitted on 05 Feb 2026
465 points (99.6% liked)

Lemmy.ca's Main Community

4031 readers
17 users here now


Welcome to the lemmy.ca/c/main community!

All new users on lemmy.ca are automatically subscribed to this community, so this is the place to read announcements, make suggestions, and chat about the goings-on of lemmy.ca.

For support requests specific to lemmy.ca, you can use !lemmy_ca_support@lemmy.ca.


founded 5 years ago
MODERATORS
 

With the recent willingness of the US Government to pressure its tech agencies into revealing user data without a proper judicial warrant, we've decided it's overdue for us migrate away from Cloudflare.

We'll be transitioning our sites over to https://deflect.ca/ over the next week or so, starting with pixelfed first before doing lemmy and piefed.

I hope to be able to do this without any noticeable downtime, but it is a major config change that will require some backend changes as well. I'll make an announcement before/after and you can always check https://status.fedecan.ca/

all 40 comments
sorted by: hot top controversial new old
[–] Binzy_Boi@piefed.ca 1 points 10 hours ago

Late to the party, but thanks for making the swap!

[–] melsaskca@lemmy.ca 1 points 23 hours ago

I'm no techie but if this moves us towards the light and away from the darkness then I'm all for it.

[–] Sunshine@piefed.ca 81 points 1 week ago* (last edited 1 week ago)

Thank you for this massive upgrade Shadow!

Deflect is based in Montreal Quebec 🍁

[–] slykethephoxenix@lemmy.ca 47 points 1 week ago* (last edited 1 week ago) (1 children)

Post this on Reddit too, so more people come here. /r/BuyCanadian is a good sub for posting this.

[–] otter@lemmy.ca 16 points 1 week ago (2 children)

Last I saw, they had rules against self promotion. I'm not sure if this qualifies, but at the very least we could post it in their self promotion specific thread.

[–] slykethephoxenix@lemmy.ca 12 points 1 week ago (1 children)

Lets be honest, they'll probably just perm ban you from that sub, but at least some people might see.

[–] Anon518@sh.itjust.works 9 points 1 week ago

Why don't you post it for them?

[–] Mongostein@lemmy.ca 5 points 1 week ago

It’s not self promotion if I do it!

… but I don’t have a Reddit account

[–] rinze@lemmy.ca 43 points 1 week ago

As a European (but who lived for 10 years in Montreal, that's why I have an account here) I applaud any initiative to move digital infrastructure away from the US. Good luck.

[–] VieuxQueb@lemmy.ca 34 points 1 week ago

That's some great news. Even without the current horrible state of the US, just CloudFlare itself is getting to be a problem anyway.

[–] asudox@lemmy.asudox.dev 26 points 1 week ago* (last edited 1 week ago) (1 children)

It's very ironic for deflect to use cloudflare for their security checks when visiting their ToS.

Other than that, it seems ok as an alternative.

[–] Shadow@lemmy.ca 11 points 1 week ago

Lol I noticed that too, but it just seems to be the captcha.

[–] Rentlar@lemmy.ca 18 points 1 week ago

Sweet I've been interested in Deflect as an alternative to CF since I noticed Cory Doctorow using it on his 'pluralistic' website.

[–] Vex_Detrause@lemmy.ca 18 points 1 week ago

Thanks for all the hard work! I totally don't understand hosting/managing the community I bet it's a huge task. Thank you!

[–] PerogiBoi@lemmy.ca 15 points 1 week ago

Fantastic. Fully approve.

[–] julian@activitypub.space 13 points 1 week ago (3 children)

@shadow@lemmy.ca very cool, and nice recommendation with deflect...

The pricing concerns me (especially since we using Cloudflare is a $0 cost)... At $10/5000 unique users, what if I get hit by a DDoS and my costs balloon?

Anyway I suppose that's a question for them, not you 😁

[–] Shadow@lemmy.ca 18 points 1 week ago

It's free for non profits, also our traffic is pretty minimal in the grand scheme of things.

I can't speak for your stuff though 😂

[–] Hazematman@lemmy.ca 11 points 1 week ago (1 children)

I thought that was strange to but here's what they say on their website that makes it sound like you wont be charged for DDoS or bots

How We Count unique IPs (UIP)

The total number of unique IPs is tallied based on total number of legitimate individual IP addresses at the end of the calendar month. If a reader visits your website every day from the same IP address, that will equal 1 unique visitor for that calendar month, no matter how often they visit your website.

Unique is fair

Other providers might charge you based on website hits, website visits, megabytes of bandwidth, services offered and many other metrics. Some providers charge premiums during attacks. We opt for fair, consistent and predictable low-cost pricing that serves our clients fairly. Malicious bots or traffic generated during an attack are not something that you will pay for either, as these IPs will not be counted in your monthly pricing.

[–] psycotica0@lemmy.ca 7 points 1 week ago (2 children)

This seems sensible, but does have some edges...

Like, if I use my phone at home, and out and about on cell, and at work, and at my in-laws, and at the library, then that's at least 5 "users" from one user as I change IPs.

And if I'm on Tor, who knows how many users I count as, but definitely a lot more than 1.

So I get what they're trying to do... but I don't think it'll work out fairly...

[–] Shadow@lemmy.ca 7 points 1 week ago* (last edited 1 week ago)

On the other hand with cgnat deployments being common on mobile devices and lower end isps, they would end up underreporting on those users.

Overall it does seem tricky. Billing per legit request or mbit would make more sense to me.

[–] Auli@lemmy.ca 3 points 1 week ago

And if I'm behind NAT everyone who is behind it counts as one.

[–] skisnow@lemmy.ca 11 points 1 week ago* (last edited 1 week ago)

wait what? I thought like 99% of the point of edge services was to protect you from DDoS? I would hope that they wouldn't bill you in cases like that.

[–] djvinniev77@lemmy.ca 12 points 1 week ago

Thanks for the transparency!

[–] excursion22@piefed.ca 11 points 1 week ago (2 children)

Is there any chance that Deflect might have a good alternative to Cloudflare tunnels for self hosters?

[–] Shadow@lemmy.ca 10 points 1 week ago

Not that I know of, and I don't think that's the direction they're going with it.

[–] powdermilkman@piefed.ca 2 points 1 week ago (1 children)
[–] excursion22@piefed.ca 2 points 1 week ago

I haven't, thanks for the suggestion. They're American though, but seems to be a reasonable company otherwise.

[–] IndridCold@lemmy.ca 9 points 1 week ago

Good call. Thank you.

[–] juspie@piefed.ca 7 points 1 week ago

Amazing news, thank you Shadow 💜

[–] rimu@piefed.social 4 points 1 week ago (1 children)

You might be able to get away with not having any CDN on PieFed at all - https://join.piefed.social/2025/11/22/reducing-piefeds-dependence-on-cloudflare/

A few weeks back I went through and made sure the Cache-Control headers are being set right so nginx can do a good job of caching.

[–] Shadow@lemmy.ca 7 points 1 week ago* (last edited 1 week ago)

I'm caching less to keep the load off piefed, and more to keep the load off our network connection and improve performance for users. Unfortunately nginx won't help with that. Also though I know it's trivial to get our origin IP if you're determined, it helps avoid the casual ddos attacks.

[–] Blaze@piefed.zip 3 points 1 week ago

Very cool !

[–] sduval@lemmy.ca 3 points 1 week ago

Nice job! I just moved my hosting to stormweb.ca and I'm super happy about the switch.

[–] avidamoeba@lemmy.ca 2 points 1 week ago (1 children)

What's used/would be used for DNS? I got a bunch at CF.

[–] Shadow@lemmy.ca 10 points 1 week ago (1 children)

Same for us, deflect. If you're looking for a good Canadian provider https://easydns.com/ is solid. We do our domain registration through https://www.canspace.ca/ and I think they also offer some DNS.

[–] avidamoeba@lemmy.ca 3 points 1 week ago
[–] bdonvr@thelemmy.club 0 points 1 week ago (1 children)

What are your Cloudflare metrics for unique visitors? I'd be very curious how it compares to your billing in Deflect.

I run a small Lemmy instance and I'm showing an insane 5M unique visitors per month. I'm sure that's mega-inflated by federations or bots though. If Deflect charged me for even a fraction of that I'd be bankrupted.

[–] Shadow@lemmy.ca 1 points 1 week ago

5M seems really high, we're at 7.8M but I've become pretty aggressive about blocking bots / scrapers from China

We're a registered non-profit in Canada though - https://deflect.ca/non-profits/