logoalt Hacker News

amyames12/09/20243 repliesview on HN

For anyone else who needs to hear this,

Hi,

I don’t have a mastodon to reply directly to you.

But i have had some issues with content being taken down by VPS providers as well.

What I’ve found works well is to use a VPS provider that the public is unaware of. And for some time I had used OVH based on the unlimited bandwidth and the reasoning that Wikipedia and Julian assange (who have far more enemies than I ever will) were using OVH.

I don’t know if that’s true any more because I subsequently moved my content to ENS and IPFS.

Anyway regardless of where your content is actually hosted or lives,

What I had done was turn my “real” servers into content origins , which were concealed form the rest of the world and lock it down in the firewall so it could only be reached by disposable squid proxy servers with a 10-liner config file

Then I pointed DNS , cloud flare etc at the squid nodes

And couldn’t care less if they were taken down.

Because I could deploy new ones in minutes elsewhere.

I didn’t have “bad content”, just ruthless business competition that kept coming at me like Tonya Harding.

And I’m sharing because your content didn’t seem too offensive either.

In the front end VPS nodes you’d just put the real address of your content as the remote origin.

And then nobody but you will ever know where it is.

Then generally your hosting company shouldn’t be aware of what it is either unless they’re snooping around in your files, and if they are, hell with them too.

You’re welcome to pass this along as a remark on avoiding censorship, or keep it to yourslelf as proprietary information I don’t mind. Let me know if you want or need an example squid conf. It’s seriously 10 lines at most and many examples found on google.


Replies

SahAssar12/09/2024

But then you need twice the bandwidth (one for egress from your "real" server, once for egress from your "front-end" server), you have a lot more latency, you've created additional points of failure, you need to sync the IPs of your "front-end" to your "real" server to allow it access. Besides that you now need to find reliable hosting from two providers, one for your "real" hosting and one for your "front-end" (using the same provider would just lead to the same issue as in the original post).

Great if it works for you, congrats. But I don't think this solves issues for many people, I doubt it solves an actual issue for you and it's basically the same as using cloudflare/akamai/similar but with a manually setup proxy on a VPS.

show 1 reply
bn-l12/09/2024

Interesting but wouldn’t that introduce a lot of latency?

sourcecodeplz12/09/2024

This is really great advice not just for this situation but in general really. For the proxies/what goes in front, I recommend cloudflare workers.

show 1 reply