28
How do I migrate my VPS out of Cloudflare? (sopuli.xyz)
submitted 10 months ago by enchantedgoldapple@sopuli.xyz to c/selfhosted@lemmy.world
5 comments fedilink hide all child comments

I have Pangolin set up as a reverse proxy in my VPS and Cloudflare as a DNS provider with its free tier.

I want to migrate out of Cloudflare for my setup, however I lack the requisite network knowledge to safely transition my VPS and domain to better alternatives and don't know where to start its research from.

There are two features I intend my setup to have after the transition:

  • DDoS protection: I was considering using Crowdsec as there is a guide to incorporate it into Pangolin, but I do not know if it will be sufficient or not. I saw a post earlier listing some alternative DDoS protection solutions, but I am wary of their limited free tier options compared to that of Cloudflare and I don't wish to pay for them as my homelab is mostly going to be used by me and a handful of friends.

  • Wildcard Certificate Generation: My domain provider has a poor DNS service and is not listed under LEGO's supporter DNS providers for enabling wildcard certificate generation and the Cloudflare one does not seem to work for some reason. I don't know of any other compatible DNS provider I could shift to unless it is provided within the other DDoS protection services as mentioned above.

Again, I don't have much knowledge in this field but I'm willing to learn and make an informed decision. Please let me know any suitable alternatives for the above, the pros and cons for the migrations, or some guide on performing such transition from Cloudflare as you seem fit.

you are viewing a single comment's thread
view the rest of the comments
[-] irmadlad@lemmy.world 2 points 10 months ago* (last edited 10 months ago)

Google Cloud Armor, AWS Shield, Fastly, Akamai, Incapsula, Freenom World, DDoS-GUARD, Netlify, all offer some level of DDoS and plans vary widely. Cloudflare's Tunnels/Zero Trust free tier is quite generous. I realize some selfhosters have an aversion to Cloudflare, but Cloudflare is very good at what they do. There are VPS hosts that do offer DDoS protection like DigitalOcean, Vultr, Linode, A2 Hosting, Hostinger, OVH, however, it's usually just basic DDoS protection. Maybe check with your host to see what they offer.

Most edge DDoS protection of any merit is going to be the big guys. You could lock down your VPS to only you and your handful of friends, but unfortunately, in the event of a DDoS attack, your server will be bearing the brunt of the attack. Is your VPS server of a nature that would elicit repeated DDoS attacks? I'll have to say, anecdotally, that I've never experienced one, but that is no guarantee that you wouldn't either.

this post was submitted on 30 Dec 2025
28 points (96.7% liked)

Selfhosted

63228 readers
348 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world