this post was submitted on 05 Feb 2026
581 points (99.5% liked)

Lemmy.ca's Main Community

4063 readers
37 users here now


Welcome to the lemmy.ca/c/main community!

All new users on lemmy.ca are automatically subscribed to this community, so this is the place to read announcements, make suggestions, and chat about the goings-on of lemmy.ca.

For support requests specific to lemmy.ca, you can use !lemmy_ca_support@lemmy.ca.


founded 5 years ago
MODERATORS
 

With the recent willingness of the US Government to pressure its tech agencies into revealing user data without a proper judicial warrant, we've decided it's overdue for us migrate away from Cloudflare.

We'll be transitioning our sites over to https://deflect.ca/ over the next week or so, starting with pixelfed first before doing lemmy and piefed.

I hope to be able to do this without any noticeable downtime, but it is a major config change that will require some backend changes as well. I'll make an announcement before/after and you can always check https://status.fedecan.ca/

Update Feb 16: pixelfed has been migrated to deflect

Update Feb 20: I'm working with deflect on improving performance before migrating lemmy / piefed over. Currently pixelfed load times aren't great due to traffic often hitting edge nodes way out in Europe

Update Mar 17: Unfortunately performance with Deflect isn't where I want it to be since their nodes are out East and our server is in Vancouver. As a result we're just going to be dropping the CDN altogether and hosting directly off our server. I'm planning to do the switchover this weekend (March 20-22), but in the meantime you can use https://test.lemmy.ca/ or https://test.piefed.ca/ if you'd like to bypass Cloudflare.

top 50 comments
sorted by: hot top controversial new old
[–] Pxtl@lemmy.ca 1 points 2 days ago (1 children)

Uh, i'm mostly confused why ther'es both a lemmy and a piefed when they do the same thing. Do I need to care about piefed.ca?

[–] Shadow@lemmy.ca 2 points 2 days ago

Both give you the same content, but the software stacks are very different. There's also significant political differences between the Lemmy devs and the piefed dev. You can view the same content on both, and many mobile clients support both.

[–] Rentlar@lemmy.ca 2 points 6 days ago (1 children)

Sorry to hear the update, but perhaps you can gently tug Deflect to hopefully expand to Metro Van or Alberta.

[–] Shadow@lemmy.ca 4 points 6 days ago

They're depending on VPS providers and as far as I know there just aren't any good DDoS resilient ones out west. They also don't have anycast or geodns, so which node you hit is just a dice roll. Unfortunately there's just no good competition to cloudflare.

[–] Sunshine@piefed.ca 103 points 1 month ago* (last edited 1 month ago)

Thank you for this massive upgrade Shadow!

Deflect is based in Montreal Quebec 🍁

[–] slykethephoxenix@lemmy.ca 59 points 1 month ago* (last edited 1 month ago) (2 children)

Post this on Reddit too, so more people come here. /r/BuyCanadian is a good sub for posting this.

[–] otter@lemmy.ca 18 points 1 month ago (2 children)

Last I saw, they had rules against self promotion. I'm not sure if this qualifies, but at the very least we could post it in their self promotion specific thread.

[–] slykethephoxenix@lemmy.ca 15 points 1 month ago (1 children)

Lets be honest, they'll probably just perm ban you from that sub, but at least some people might see.

[–] Anon518@sh.itjust.works 13 points 1 month ago

Why don't you post it for them?

[–] Mongostein@lemmy.ca 7 points 1 month ago

It’s not self promotion if I do it!

… but I don’t have a Reddit account

[–] GrindingGears@lemmy.ca 5 points 1 month ago (1 children)

The reddit mods get very angry when you suggest links away from their little fiefdoms. An ultra sensitive bunch they are.

[–] Gunner_Marc@lemmy.ca 2 points 4 days ago

Most Reddit moderators are self important wankers.

[–] rinze@lemmy.ca 53 points 1 month ago

As a European (but who lived for 10 years in Montreal, that's why I have an account here) I applaud any initiative to move digital infrastructure away from the US. Good luck.

[–] VieuxQueb@lemmy.ca 39 points 1 month ago

That's some great news. Even without the current horrible state of the US, just CloudFlare itself is getting to be a problem anyway.

[–] asudox@lemmy.asudox.dev 31 points 1 month ago* (last edited 1 month ago) (1 children)

It's very ironic for deflect to use cloudflare for their security checks when visiting their ToS.

Other than that, it seems ok as an alternative.

[–] Shadow@lemmy.ca 18 points 1 month ago (1 children)

Lol I noticed that too, but it just seems to be the captcha.

[–] Gunner_Marc@lemmy.ca 1 points 4 days ago

Captchas are stupid.

[–] Rentlar@lemmy.ca 20 points 1 month ago

Sweet I've been interested in Deflect as an alternative to CF since I noticed Cory Doctorow using it on his 'pluralistic' website.

[–] Vex_Detrause@lemmy.ca 19 points 1 month ago

Thanks for all the hard work! I totally don't understand hosting/managing the community I bet it's a huge task. Thank you!

[–] PerogiBoi@lemmy.ca 18 points 1 month ago

Fantastic. Fully approve.

[–] julian@activitypub.space 14 points 1 month ago (3 children)

@shadow@lemmy.ca very cool, and nice recommendation with deflect...

The pricing concerns me (especially since we using Cloudflare is a $0 cost)... At $10/5000 unique users, what if I get hit by a DDoS and my costs balloon?

Anyway I suppose that's a question for them, not you 😁

[–] Shadow@lemmy.ca 21 points 1 month ago

It's free for non profits, also our traffic is pretty minimal in the grand scheme of things.

I can't speak for your stuff though 😂

[–] skisnow@lemmy.ca 13 points 1 month ago* (last edited 1 month ago)

wait what? I thought like 99% of the point of edge services was to protect you from DDoS? I would hope that they wouldn't bill you in cases like that.

[–] Hazematman@lemmy.ca 13 points 1 month ago (1 children)

I thought that was strange to but here's what they say on their website that makes it sound like you wont be charged for DDoS or bots

How We Count unique IPs (UIP)

The total number of unique IPs is tallied based on total number of legitimate individual IP addresses at the end of the calendar month. If a reader visits your website every day from the same IP address, that will equal 1 unique visitor for that calendar month, no matter how often they visit your website.

Unique is fair

Other providers might charge you based on website hits, website visits, megabytes of bandwidth, services offered and many other metrics. Some providers charge premiums during attacks. We opt for fair, consistent and predictable low-cost pricing that serves our clients fairly. Malicious bots or traffic generated during an attack are not something that you will pay for either, as these IPs will not be counted in your monthly pricing.

[–] psycotica0@lemmy.ca 8 points 1 month ago (2 children)

This seems sensible, but does have some edges...

Like, if I use my phone at home, and out and about on cell, and at work, and at my in-laws, and at the library, then that's at least 5 "users" from one user as I change IPs.

And if I'm on Tor, who knows how many users I count as, but definitely a lot more than 1.

So I get what they're trying to do... but I don't think it'll work out fairly...

[–] Shadow@lemmy.ca 8 points 1 month ago* (last edited 1 month ago)

On the other hand with cgnat deployments being common on mobile devices and lower end isps, they would end up underreporting on those users.

Overall it does seem tricky. Billing per legit request or mbit would make more sense to me.

[–] Auli@lemmy.ca 4 points 1 month ago

And if I'm behind NAT everyone who is behind it counts as one.

[–] djvinniev77@lemmy.ca 13 points 1 month ago

Thanks for the transparency!

[–] excursion22@piefed.ca 12 points 1 month ago (2 children)

Is there any chance that Deflect might have a good alternative to Cloudflare tunnels for self hosters?

[–] Shadow@lemmy.ca 11 points 1 month ago

Not that I know of, and I don't think that's the direction they're going with it.

[–] powdermilkman@piefed.ca 2 points 1 month ago (1 children)
[–] excursion22@piefed.ca 2 points 1 month ago

I haven't, thanks for the suggestion. They're American though, but seems to be a reasonable company otherwise.

[–] IndridCold@lemmy.ca 11 points 1 month ago

Good call. Thank you.

[–] Pratai@piefed.ca 10 points 1 month ago

This makes me glad to call .ca my home! Thank you!

[–] juspie@piefed.ca 9 points 1 month ago

Amazing news, thank you Shadow 💜

[–] rimu@piefed.social 5 points 1 month ago (1 children)

You might be able to get away with not having any CDN on PieFed at all - https://join.piefed.social/2025/11/22/reducing-piefeds-dependence-on-cloudflare/

A few weeks back I went through and made sure the Cache-Control headers are being set right so nginx can do a good job of caching.

[–] Shadow@lemmy.ca 8 points 1 month ago* (last edited 1 month ago)

I'm caching less to keep the load off piefed, and more to keep the load off our network connection and improve performance for users. Unfortunately nginx won't help with that. Also though I know it's trivial to get our origin IP if you're determined, it helps avoid the casual ddos attacks.

[–] melsaskca@lemmy.ca 5 points 1 month ago

I'm no techie but if this moves us towards the light and away from the darkness then I'm all for it.

[–] Sgtmoustache@lemmy.ca 5 points 1 month ago

Thanks! Merci!

[–] Blaze@piefed.zip 4 points 1 month ago

Very cool !

[–] sduval@lemmy.ca 4 points 1 month ago (1 children)

Nice job! I just moved my hosting to stormweb.ca and I'm super happy about the switch.

load more comments (1 replies)
[–] BrilliantBadger@piefed.ca 3 points 3 weeks ago

As an American I applaud this move

[–] avidamoeba@lemmy.ca 3 points 1 month ago (1 children)

What's used/would be used for DNS? I got a bunch at CF.

[–] Shadow@lemmy.ca 13 points 1 month ago (1 children)

Same for us, deflect. If you're looking for a good Canadian provider https://easydns.com/ is solid. We do our domain registration through https://www.canspace.ca/ and I think they also offer some DNS.

[–] avidamoeba@lemmy.ca 3 points 1 month ago
[–] OutForARip@lemmy.ca 2 points 3 weeks ago

Why great news!

[–] slykethephoxenix@lemmy.ca 2 points 1 month ago

-1 new comments lol.

[–] bdonvr@thelemmy.club 2 points 1 month ago (1 children)

What are your Cloudflare metrics for unique visitors? I'd be very curious how it compares to your billing in Deflect.

I run a small Lemmy instance and I'm showing an insane 5M unique visitors per month. I'm sure that's mega-inflated by federations or bots though. If Deflect charged me for even a fraction of that I'd be bankrupted.

[–] Shadow@lemmy.ca 6 points 1 month ago

5M seems really high, we're at 7.8M but I've become pretty aggressive about blocking bots / scrapers from China

We're a registered non-profit in Canada though - https://deflect.ca/non-profits/