Mentioned this in another reply; in my case I am running Bunny Shield, but my Bunny origins are then my own ingress boxes / LBs which themselves are running ModSecurity with OWASP CRS; and CrowdSec.
They have Bunny Shield which I have in place as a first stage, but Bunny points to my own ingress boxes / load balancers which themselves are running ModSecurity, OWASP CRS and CrowdSec.
Honestly my needs are not super complicated. There are a few edge rules I have in place to try and block things like the TikTok Bytespider which is hammering one of my sites.
It's able to support round-robin multi-endpoint DNS, including weightings you can update which is super useful for what I'm doing.
I've only really needed to speak to support twice so far; one was to get un-blocked because I migrated all my sites too quickly on a fresh account lol, so triggered their suspicious activity (so just be aware of that) - but both times they replied within an hour and resolved things.
I started the process of this back in January and now, at least in terms of product hosting; fully migrated into European infrastructure (https://bannermedia.ltd).
It didn't come without a bit of pain, but glad I've done it - and to come with this I've ended up building a whole terraform setup for cross provider / cross region high availability within Europe.
So far my key mappings included:
- Cloudflare -> Bunny CDN (and honestly I am so impressed with Bunny so far)
- AWS (or similar) -> Hetzner + OVH; I'm also looking at Civo.com for UK presence.
- GitHub -> Forgejo. I do actually still operate in GitHub for development only work, however Forgejo is mirrored within my European private network, and thats where deployment workflows happen.
- Google Analytics -> Self hosted Umami.
I'll be doing a writeup fairly soon on the entire process.