HappyCathode

Hey ! I see Tailscale Funnels as maybe a good replacement for Ngrok, but not for Cloudflare Tunnels.

Your Funnels are in Beta, MUST use your tailnet’s domain name, have bandwitdh limits, no failover and no load balancing. If my website goes down, I close shop. Cloudflare Tunnels are just way more mature for production loads. CF Tunnels technically don't have load balancing, but if you set multiple Tunnels with the same ID, you get some sort of load balancing AND failovers if a tunnel goes down. And after that, they have a paid Load Balancer option.

Even for internal admin portals, the mention that "Traffic over Funnel is subject to bandwidth limits." with absolutely no defined numbers is just a turn off. If you added a number to that, like a limit of MBPS or GB/Month of transfer, it would be something I can bring to my colleagues, something we can discuss and weight on. For now, with no number, it's just a threat.

Everything else about Tailscale is chefskiss tho ;)

I'de rather have full network isolation for internal stuff like admin portals. Plus, I already use Tailscale to sync DBs between regions and clouds.

That's really neat. Cloudflare tunnel for external customer egress, and Tailscale for internal tool egress. No more costly cloud specific load balancers !

I think they meant that your public IPs are responding to requests on :80 and :443. Port scanners are going to find it pretty fast and have fun.

I'm planning on dropping anything that doesn't come from https://www.cloudflare.com/en-ca/ips/, but the tunnels in indeed even better... don't have to stay up-to-date with IP list, and don't have to waste CPU dropping bad traffic. Cloudflare is indeed the safest known solution.

And yeah Bunny.net are getting annoying with their "Coming Soon" stuff. S3 API has been "almost ready" since at least 2020, according to one of their Twitter post. It looks like they are way too small to deliver, but I really like them and I hope they will.

That looks promising, I'm currently looking at Sendgrid and Mailgun.

2 points I would bring :

- You need a cheaper plan. Mailgun have their flex plan that's 0$ for 1000 emails per month, and then 1$ for any extra 1000. It would cost more to send 50k emails, but I'm not there yet, I need a cheap starter plan with a lot less emails. My total infra cost is going to be around 30$, so I'm not going to drop an extra 66% to send maybe 1000 emails per month.

- If I reach my plan limits, you need to still deliver my emails and I' ll happily pay for them. Your FAQ says : If you exceed your plan limits, you will be notified and given the option to upgrade to a higher plan. If you don’t upgrade and repeatedly exceed your plan, your account may be temporarily deactivated.

My platform relies on emails to register users, MFA backup and transactions invoices. So if my email provider doesn't send my emails, my platform is broken. Yes, I could "just" keep an eye on my usage, look at it multiple times per day. I could also take some of my time to put some monitoring in place to wake me up at 3AM if there's a spike in traffic and I need to upgrade my plan.

Or, I can do none of that and register to a Mailgun Flex plan, or a 20$ Sendgrid plan, and not spend my time babysitting my email provider. Both Mailgun and Sendgrid allow going over plan quota and just charge you a premium. Don't not deliver emails, you're an email provider, that's disruptive.