Hacker News new | ask | show | jobs
by IAmFledge 43 days ago
I started the process of this back in January and now, at least in terms of product hosting; fully migrated into European infrastructure (https://bannermedia.ltd).

It didn't come without a bit of pain, but glad I've done it - and to come with this I've ended up building a whole terraform setup for cross provider / cross region high availability within Europe.

So far my key mappings included:

- Cloudflare -> Bunny CDN (and honestly I am so impressed with Bunny so far)

- AWS (or similar) -> Hetzner + OVH; I'm also looking at Civo.com for UK presence.

- GitHub -> Forgejo. I do actually still operate in GitHub for development only work, however Forgejo is mirrored within my European private network, and thats where deployment workflows happen.

- Google Analytics -> Self hosted Umami.

I'll be doing a writeup fairly soon on the entire process.

7 comments

> - AWS (or similar) -> Hetzner + OVH; I'm also looking at Civo.com for UK presence.

At some point deciders at EU companies are going to notice that Hetzner and/or OVH are also not a bit but much cheaper than AWS.

We already use them for our egress heavy services.
Waiting for your writeup, especially the Bunny part. We moved away from AWS but Cloudflare remains a point of failure, we are going to remove it as soon as we have some spare time to do the required research.
What are you looking for? I use Bunny CDN along with Bunny Shield, and together they're better than Cloudflare for me. It's $10/month, but I can afford it for the privacy of my users. Bunny's aggressive bot blocking without bothering the vast majority of users with regular challenge pages provides a much better UX.
But Bunny Shield is not a Cloudflare WAF replacement afaik. Not even close.
Mentioned this in another reply; in my case I am running Bunny Shield, but my Bunny origins are then my own ingress boxes / LBs which themselves are running ModSecurity with OWASP CRS; and CrowdSec.
Honestly my needs are not super complicated. There are a few edge rules I have in place to try and block things like the TikTok Bytespider which is hammering one of my sites. It's able to support round-robin multi-endpoint DNS, including weightings you can update which is super useful for what I'm doing. I've only really needed to speak to support twice so far; one was to get un-blocked because I migrated all my sites too quickly on a fresh account lol, so triggered their suspicious activity (so just be aware of that) - but both times they replied within an hour and resolved things.
Instead of Hetzner, I found UpCloud to be a great EU alternative. Reliable, cheap and supportive.
How's the Object Storage support? did you have any issues? Hetzner looks more stable now but I had a lot of issues with S3 compatible storage a while ago... Almost made me change everything. If you're willing or able to share of course..
Honestly never needed it but here is their page about it: https://upcloud.com/global/products/object-storage/
If you want pure compute, https://unikraft.com has been great. We run schemas.sourcemeta.com on it, and it offers EU hosting (Frankfurt). They are themselves a German startup (though now with US presence too)
> looking at Civo.com for UK presence

Hadn't come across Civo. They advertise "transparent" pricing, but I can't seem to find prices for VMs... or anything else!

Maybe it's just me, but do you have a link to a pricing page perchance?

In the menu there is the pricing page? URL is /pricing
Huh, I'd swear earlier today that page didn't have any actual prices on it, but it clearly does now, thanks.
Did you use Cloudflare for it’s WAF too or just CDN? Last I checked Bunny is not a replacement for the CF WAF.
They have Bunny Shield which I have in place as a first stage, but Bunny points to my own ingress boxes / load balancers which themselves are running ModSecurity, OWASP CRS and CrowdSec.
try Gcore as well
Solid list! To expand upon it, Let's Encrypt -> ZeroSSL.