Comment by grapehut | Hacker News Reader

Comment by grapehut | Hacker News Reader

Hey, wow. The site looks really good, so I connected a domain to try it.

Initial feedback: * I spent about 2-3 minutes to trying to find how to get to the main website settings. Only just before giving up I found the "..." which contained it. I think the "Manage your website settings" settings should be prominently displayed.

* All subdomains (and the domain itself) needs to point at the same ip address? This seems to be a pretty big limitation

* This is definitely the most confusing of the UI: https://i.gyazo.com/dc0f848525e98a08944f839aabbea44e.png I thought it was all a single form. I'd break it up a bit better, and when adding a subdomain explain the steps better (aliasing)

* While my ssl certificate is being provisioned, my site is serving a certificate from organkimlan.com I'm guessing that's another one of your customers?

* I love the idea of real time stats, and route-specific feedback (page load time , errors etc).

Some questions:

* What's your content policy in comparison to cloudflares? (That's probably the single biggest thing I like about them)

* Do you have any guides on how your site respects caching? I really love how cloudfront handles this (unlike cloudflare)

* Are you guys able to eat a DDoS? Is this one of the services you're providing?

Anyway, one of the most impressive Show HNs I've seen in a while. I wish you guys great success and will be following closely

Thanks grapehut.

* No excuses, the website settings look like shit and will be fixed.

* You can add subdomains that point to the same site. (For example, www.example.com and example.com). If you have a different site, you can add a new one in the top right corner. (For example, 2 different websites of "test.com" and "dashboard.test.com")

* On the SSL cert issue, Sorry about this, this is a bug. Our engineers are looking into it. Do you have an email that I can contact you with? You can email us at hello@kloudsec.com and our engineers will immediately help you with this.

* We have no content policy as of now. (This is a schlep and we'll fix this. We'll send an email update once we have this)

* Caching is based on file hashing. Not filenames. You can also manually clear the CDN cache from the dashboard itself.

* DDoS defense. Erm well, we're just lacking 1 last step. Having enough traction/capital to buy lots of bandwidth from our DC to stomach it. We're on it.

Thanks for this feedback. This is insanely useful. We're very excited about this space.

> Caching is based on file hashing. Not filenames.

I'm not really sure what this means, and I've used all the major CDNs/reverse proxies =)

Cloudflare for instance is generally controlled by the filetypes, while cloudfront is generally controlled by the cache control headers sent by the origin server.

Either way, I think exactly how it works needs to go into its own fully-fledged article. It's probably the most important thing a reverse-proxy does, and should be documented very clearly.

BTW one unique feature of cloudfront you might want to support, is setting cache control with vary on cookie. So with cloudfront, I can make non-logged in users see a cached page, while logged-in users see a non-cached page. It allows me to take a huge amount of load off the origin server, with no real downsides (in my case).

My guess is it's a de-duplication trick. They might even have dedicated caching servers. I'd guess others might do it behind the scenes with them just being upfront about it for whatever reason. Just an educated guess.

Reply on news.ycombinator.com