Les petites boulettes du web - Page 59

Votre nom@domaine.fr compte personnel est inutilisé depuis deux ans et est actuellement bloqué. Vos fichiers sont toujours là, mais votre OneDrive et tous les fichiers enregistrés sur ce compte seront supprimés à cette date ou ultérieurement 10/3/2021 3:17:12 PM sauf si vous ouvrez une session OneDrive pour le réactiver.

En savoir plus ce que veut dire être bloqué.

https://kmitov.com/posts/when-the-policeman-becomes-the-criminal-how-cloudflare-attacks-my-machines/ :
This article is the story of how Cloudflare started an “attack” on a machine at the FLLCasts platform. This increased the traffic of the machine about 10x and AWS started charging the account 10x more. I managed to stop them and I hope my experience is useful for all CTOs, sysadmins, devops and others that would like to understand more and look out for such cases.

TL; DR;
Current up to date status is – after all the investigation it turns out that when a client makes a HEAD request for a file this will hit Cloudflare infrastructure. Cloudflare will then send a GET request to the account machine and will cache the file. This has changed at 28 of August. Before 28 of August when clients were sending HEAD requests, Cloudflare was sending HEAD requests (that don’t generate traffic). After 28 of August clients are still sending HEAD requests, but now Cloudflare is sending GET requests, generating terabytes of additional traffic that is not needed.

Limit billing on AWS
First thought was “How can I set a global limit to AWS spending for this account? I don’t want to wake up with $50K in traffic charges the next day?”

The answer is “You can’t”. There is no way to set a global spending limit for an AWS account. This was something I already knew, but decided to check again with support and yes, you can’t set such a limit. This means that AWS is providing all the tools for you to be bankrupt by a third party and they are not willing to limit it.

Limit billing on Digital Ocean
I have some machines on Digital Ocean and I checked there. “Can I set a global spending limit for my account where I will no longer be charged and all my services will stop if my spending is above X amount of dollars?”.
The answer was again – “No. Digital ocean does not provide it”.

% dig A fr.

; <<>> DiG 9.10.6 <<>> A fr.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22561
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;fr.				IN	A

;; AUTHORITY SECTION:
fr.			1800	IN	SOA	nsmaster.nic.fr. hostmaster.nic.fr. 2228806575 3600 1800 3600000 5400

;; Query time: 34 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Oct 30 21:35:12 BST 2021
;; MSG SIZE  rcvd: 91