[phamilton]

Given the premise that zero day exploits are going to be frequent going forward, I feel like there is a new standard for secure deployment.

Namely, all remote access (including serving http) must managed by a major player big enough to be part of private disclosure (e.g. Project Glasswing).

That doesn't mean we have to use AWS et al for everything, but some sort of zero trust solution actively maintained by one of them seems like the right path. For example, I've started running on Hetzner with Cloudflare Tunnels.

Anyone else doing something similar?

[locknitpicker]

> For example, I've started running on Hetzner with Cloudflare Tunnels.

How much latency does this add?

[2E3BCFFD]

We've testing something similar, not using in prod yet. Network was 20ms RTT. The real variable was processing time median was sub-5ms most days but some regions would be 30ms for 8-10 hour blocks randomly.