With the recent willingness of the US Government to pressure its tech agencies into revealing user data without a proper judicial warrant, we've decided it's overdue for us migrate away from Cloudflare.
We'll be transitioning our sites over to https://deflect.ca/ over the next week or so, starting with pixelfed first before doing lemmy and piefed.
I hope to be able to do this without any noticeable downtime, but it is a major config change that will require some backend changes as well. I'll make an announcement before/after and you can always check https://status.fedecan.ca/
Update Feb 16: pixelfed has been migrated to deflect
Update Feb 20: I'm working with deflect on improving performance before migrating lemmy / piefed over. Currently pixelfed load times aren't great due to traffic often hitting edge nodes way out in Europe
Update Mar 17: Unfortunately performance with Deflect isn't where I want it to be since their nodes are out East and our server is in Vancouver. As a result we're just going to be dropping the CDN altogether and hosting directly off our server. I'm planning to do the switchover this weekend (March 20-22), but in the meantime you can use https://test.lemmy.ca/ or https://test.piefed.ca/ if you'd like to bypass Cloudflare.
50 Comments
Sunshine@piefed.ca · 106 pts · 205d
Thank you for this massive upgrade Shadow!
Deflect is based in Montreal Quebec 🍁
slykethephoxenix@lemmy.ca · 61 pts · 205d
Post this on Reddit too, so more people come here. /r/BuyCanadian is a good sub for posting this.
otter@lemmy.ca · 19 pts · 205d
Last I saw, they had rules against self promotion. I'm not sure if this qualifies, but at the very least we could post it in their self promotion specific thread.
slykethephoxenix@lemmy.ca · 17 pts · 205d
Lets be honest, they'll probably just perm ban you from that sub, but at least some people might see.
Anon518@sh.itjust.works · 13 pts · 205d
Why don't you post it for them?
Mongostein@lemmy.ca · 7 pts · 204d
It’s not self promotion if I do it!
… but I don’t have a Reddit account
GrindingGears@lemmy.ca · 5 pts · 189d
The reddit mods get very angry when you suggest links away from their little fiefdoms. An ultra sensitive bunch they are.
Gunner_Marc@lemmy.ca · 2 pts · 162d
Most Reddit moderators are self important wankers.
rinze@lemmy.ca · 53 pts · 205d
As a European (but who lived for 10 years in Montreal, that's why I have an account here) I applaud any initiative to move digital infrastructure away from the US. Good luck.
VieuxQueb@lemmy.ca · 40 pts · 205d
That's some great news. Even without the current horrible state of the US, just CloudFlare itself is getting to be a problem anyway.
asudox@lemmy.asudox.dev · 31 pts · 205d
It's very ironic for deflect to use cloudflare for their security checks when visiting their ToS.
Other than that, it seems ok as an alternative.
Shadow@lemmy.ca · 18 pts · 205d
Lol I noticed that too, but it just seems to be the captcha.
Gunner_Marc@lemmy.ca · 1 pts · 162d
Captchas are stupid.
Rentlar@lemmy.ca · 20 pts · 205d
Sweet I've been interested in Deflect as an alternative to CF since I noticed Cory Doctorow using it on his 'pluralistic' website.
Vex_Detrause@lemmy.ca · 19 pts · 205d
Thanks for all the hard work! I totally don't understand hosting/managing the community I bet it's a huge task. Thank you!
PerogiBoi@lemmy.ca · 18 pts · 202d
Fantastic. Fully approve.
bdonvr@thelemmy.club · 14 pts · 205d
What are your Cloudflare metrics for unique visitors? I'd be very curious how it compares to your billing in Deflect.
I run a small Lemmy instance and I'm showing an insane 5M unique visitors per month. I'm sure that's mega-inflated by federations or bots though. If Deflect charged me for even a fraction of that I'd be bankrupted.
Shadow@lemmy.ca · 31 pts · 205d
5M seems really high, we're at 7.8M but I've become pretty aggressive about blocking bots / scrapers from China
We're a registered non-profit in Canada though - https://deflect.ca/non-profits/
julian@activitypub.space · 14 pts · 205d
@shadow@lemmy.ca very cool, and nice recommendation with deflect...
The pricing concerns me (especially since we using Cloudflare is a $0 cost)... At $10/5000 unique users, what if I get hit by a DDoS and my costs balloon?
Anyway I suppose that's a question for them, not you 😁
Shadow@lemmy.ca · 21 pts · 205d
It's free for non profits, also our traffic is pretty minimal in the grand scheme of things.
I can't speak for your stuff though 😂
skisnow@lemmy.ca · 13 pts · 205d
wait what? I thought like 99% of the point of edge services was to protect you from DDoS? I would hope that they wouldn't bill you in cases like that.
Hazematman@lemmy.ca · 13 pts · 205d
I thought that was strange to but here's what they say on their website that makes it sound like you wont be charged for DDoS or bots
psycotica0@lemmy.ca · 8 pts · 205d
This seems sensible, but does have some edges...
Like, if I use my phone at home, and out and about on cell, and at work, and at my in-laws, and at the library, then that's at least 5 "users" from one user as I change IPs.
And if I'm on Tor, who knows how many users I count as, but definitely a lot more than 1.
So I get what they're trying to do... but I don't think it'll work out fairly...
Shadow@lemmy.ca · 8 pts · 205d
On the other hand with cgnat deployments being common on mobile devices and lower end isps, they would end up underreporting on those users.
Overall it does seem tricky. Billing per legit request or mbit would make more sense to me.
Auli@lemmy.ca · 4 pts · 204d
And if I'm behind NAT everyone who is behind it counts as one.
djvinniev77@lemmy.ca · 13 pts · 205d
Thanks for the transparency!
excursion22@piefed.ca · 12 pts · 205d
Is there any chance that Deflect might have a good alternative to Cloudflare tunnels for self hosters?
Shadow@lemmy.ca · 11 pts · 205d
Not that I know of, and I don't think that's the direction they're going with it.
powdermilkman@piefed.ca · 2 pts · 205d
have you looked at ngrok?
excursion22@piefed.ca · 2 pts · 204d
I haven't, thanks for the suggestion. They're American though, but seems to be a reasonable company otherwise.
IndridCold@lemmy.ca · 11 pts · 203d
Good call. Thank you.
Pratai@piefed.ca · 10 pts · 193d
This makes me glad to call .ca my home! Thank you!
juspie@piefed.ca · 9 pts · 203d
Amazing news, thank you Shadow 💜
Binzy_Boi@piefed.ca · 5 pts · 195d
melsaskca@lemmy.ca · 5 pts · 196d
I'm no techie but if this moves us towards the light and away from the darkness then I'm all for it.
Sgtmoustache@lemmy.ca · 5 pts · 192d
Thanks! Merci!
rimu@piefed.social · 5 pts · 203d
You might be able to get away with not having any CDN on PieFed at all - https://join.piefed.social/2025/11/22/reducing-piefeds-dependence-on-cloudflare/
A few weeks back I went through and made sure the Cache-Control headers are being set right so nginx can do a good job of caching.
Shadow@lemmy.ca · 8 pts · 203d
I'm caching less to keep the load off piefed, and more to keep the load off our network connection and improve performance for users. Unfortunately nginx won't help with that. Also though I know it's trivial to get our origin IP if you're determined, it helps avoid the casual ddos attacks.
sduval@lemmy.ca · 4 pts · 203d
Nice job! I just moved my hosting to stormweb.ca and I'm super happy about the switch.
hoserhobbes@lemmy.ca · 1 pts · 173d
Their basic hosting and storage plans seem good, but I'm always disappointed when I look at any Canadian hosting for VPS prices. I'd love to use a Canadian VPS alongside or instead of my Hetzner VPS - but the prices always seems to be 2-3+x what Hetzner offers.
Blaze@piefed.zip · 4 pts · 205d
Very cool !
avidamoeba@lemmy.ca · 3 pts · 205d
What's used/would be used for DNS? I got a bunch at CF.
Shadow@lemmy.ca · 13 pts · 205d
Same for us, deflect. If you're looking for a good Canadian provider https://easydns.com/ is solid. We do our domain registration through https://www.canspace.ca/ and I think they also offer some DNS.
avidamoeba@lemmy.ca · 3 pts · 205d
Thank you!
BrilliantBadger@piefed.ca · 3 pts · 183d
As an American I applaud this move
slykethephoxenix@lemmy.ca · 2 pts · 187d
-1 new comments lol.
Rentlar@lemmy.ca · 2 pts · 164d
Sorry to hear the update, but perhaps you can gently tug Deflect to hopefully expand to Metro Van or Alberta.
Shadow@lemmy.ca · 4 pts · 163d
They're depending on VPS providers and as far as I know there just aren't any good DDoS resilient ones out west. They also don't have anycast or geodns, so which node you hit is just a dice roll. Unfortunately there's just no good competition to cloudflare.
OutForARip@lemmy.ca · 2 pts · 184d
Why great news!
Cantaloupe@fedioasis.cc · 1 pts · 195d
Pxtl@lemmy.ca · 1 pts · 159d
Uh, i'm mostly confused why ther'es both a lemmy and a piefed when they do the same thing. Do I need to care about piefed.ca?
Shadow@lemmy.ca · 2 pts · 159d
Both give you the same content, but the software stacks are very different. There's also significant political differences between the Lemmy devs and the piefed dev. You can view the same content on both, and many mobile clients support both.
Cantaloupe@fedioasis.cc · 1 pts · 195d