No, but I thought I clarified that when I said it’s basically wireguard VPN which operates using tcp/udp (layer 3.) layer 7 is stuff like https. CF tunnels are lower level.

Page you linked is missing the layer between CF and source server so it doesn’t indicate layer. You can lookup wireguard protocol if you want more details.

CF tunnels are layer 3, not 7 and they have support for web sockets. It’s basically wireguard VPN with a few extras built on top.

https://developers.cloudflare.com/cloudflare-one/faq/cloudflare-tunnels-faq/

Public registration has nothing to do with federation. My instance required admin approval for all new registrations. Illegal content is much more likely to come through federation than from inside.

IMHO, the few reasons to host your own instance largely disappeared with 0.19 and the risks were never worth the rewards to run a tiny instance. Things are likely to continue improving with future releases. Which is why sdf.org became my main.

Your biggest fear should be something like the CSAM attack from a few months ago. I doubt you have tens of thousands to spend on a lawyer.

That’s why I killed my instance.

On one hand I hate that legit users are punished for the actions of few cunts selling massive plex libraries and using Hetzner because of cheap storage and unlimited transfer, but I sort of understand that plex doesn’t want to be associated with piracy (lol).

On the other, fuck Plex. Seems trivial to detect these massive libraries with hundreds of “friends” and just shut those down. Seems insane to block a whole fucking provider over this. I’ve been a paid subscriber since day one and then bought a lifetime pass, but this dumb move is making me consider other products.

But on third hand, I don’t really care because I use tailscale so I almost never use the plex’s proxy anyway.