IAmFledge

Mentioned this in another reply; in my case I am running Bunny Shield, but my Bunny origins are then my own ingress boxes / LBs which themselves are running ModSecurity with OWASP CRS; and CrowdSec.

They have Bunny Shield which I have in place as a first stage, but Bunny points to my own ingress boxes / load balancers which themselves are running ModSecurity, OWASP CRS and CrowdSec.

Honestly my needs are not super complicated. There are a few edge rules I have in place to try and block things like the TikTok Bytespider which is hammering one of my sites. It's able to support round-robin multi-endpoint DNS, including weightings you can update which is super useful for what I'm doing. I've only really needed to speak to support twice so far; one was to get un-blocked because I migrated all my sites too quickly on a fresh account lol, so triggered their suspicious activity (so just be aware of that) - but both times they replied within an hour and resolved things.

I started the process of this back in January and now, at least in terms of product hosting; fully migrated into European infrastructure (https://bannermedia.ltd).

It didn't come without a bit of pain, but glad I've done it - and to come with this I've ended up building a whole terraform setup for cross provider / cross region high availability within Europe.

So far my key mappings included:

- Cloudflare -> Bunny CDN (and honestly I am so impressed with Bunny so far)

- AWS (or similar) -> Hetzner + OVH; I'm also looking at Civo.com for UK presence.

- GitHub -> Forgejo. I do actually still operate in GitHub for development only work, however Forgejo is mirrored within my European private network, and thats where deployment workflows happen.

- Google Analytics -> Self hosted Umami.

I'll be doing a writeup fairly soon on the entire process.

This doesn't seem worlds away from LiveSheets.

http://livesheets.com/

Interesting angle.