Live data from Hacker News

AWS Shield – Managed DDoS Protection

aws.amazon.com

31–40 of 79 posts

Re: AWS Shield – Managed DDoS Protection

#31
post #29

Earlier quoted context omitted.

As per the pricing page, looks like you _do_ need support plan: "AWS Shield Advanced is available to customers who are enrolled in either the Enterprise or Business Support levels of AWS Premium Support." https://aws.amazon.com/shield/pricing/

Oh wow, thanks! I hadn't noticed that yet :| So many caveats to this thing. Look like I'd need to pony up >1k/mo on top of 3k to get access to the service then...

AWS is not the place to be if you're on a budget

Re: AWS Shield – Managed DDoS Protection

#32
post #15
post #14

Earlier quoted context omitted.

Not really. Now your $1K DDOS bill is a $1K AWS credit. Hardly any better. AWS desperately needs a way to turn off pay-by-use services through billing alerts. I don't believe this is possible right now.

>Now your $1K DDOS bill is a $1K AWS credit. Nice! >Hardly any better. ...what?

Cash is king. Loaning money to Amazon you could be using to pay suppliers or salaries or returning to investors is a cost.

Re: AWS Shield – Managed DDoS Protection

#33
So credits are limited to specific services

> usage spikes on Elastic Load Balancing (ELB)

If traffic has reached the load balancer than it's probably reached your app. No ec2 / storage / traffic credits here.

> Amazon CloudFront

Neat. Like cloudflare but with less features though.

> or Amazon Route 53

DNS... Not really sure what to make of this one.

Re: AWS Shield – Managed DDoS Protection

#35
post #26

So many new named services. AWS will soon get to a point where their product dropdown wont fit on a laptop screen. Maybe it's time to consolidate some of these services into more general products.

They did just re-organize that dropdown in AWS, it's actually much easier to search and find things. You can also pin commonly-used services to the top menu bar too.

I hate the new dropdown. The old one had brightly-coloured icons that were an easy visual search. The new one is a wall of text you have to parse.

Re: AWS Shield – Managed DDoS Protection

#36
post #26

Earlier quoted context omitted.

They did just re-organize that dropdown in AWS, it's actually much easier to search and find things. You can also pin commonly-used services to the top menu bar too.

For someone familiar with the products, yes. But for someone new to AWS most of these options don't make sense. I'm looking at a menu with hundreds of options like Snowglobe and Beanstalk and I have no idea where to start. Are they trying to brand their trademarks as the defacto name for the service (like Kleenex and ChapStick have done)?

99% of their products aren't useful to the individual computer guy, and are geared toward enterprise. Ignore them and use the specific ones you need.

Re: AWS Shield – Managed DDoS Protection

#37
post #13

Earlier quoted context omitted.

AWS Shield Advanced though...so what does this mean if you are on Standard ? One of the biggest fears is launching an EC2 instance (or some other service) only to get hit at some random point in time with a DDoS attack and a large bill at the end of the month. I've read stories of AWS forgiving events like this, but are you now up a creek if you don't subscribe to their "Advanced" tier?

Precisely. The majority of people who are be afraid of using AWS services for the risk of a bill shock due to a DDoS would be small customers who won't be able to afford the 3,000$ per month price tag for the advanced shield anyways. For them, it's still risky to use AWS.

Unless you're spending $xx,xxx or above monthly with AWS, you're probably better off using Cloudflare for DDOS protection.

EDIT: Number is professional opinion from my experience running large AWS accounts over the last 10 years.

Re: AWS Shield – Managed DDoS Protection

#39
post #13

Earlier quoted context omitted.

Precisely. The majority of people who are be afraid of using AWS services for the risk of a bill shock due to a DDoS would be small customers who won't be able to afford the 3,000$ per month price tag for the advanced shield anyways. For them, it's still risky to use AWS.

Unless you're spending $xx,xxx or above monthly with AWS, you're probably better off using Cloudflare for DDOS protection. EDIT: Number is professional opinion from my experience running large AWS accounts over the last 10 years.

[deleted]

Re: AWS Shield – Managed DDoS Protection

#40
post #25

I have a lot of questions/problems with this. Here are two. 1.) They mention in the compare tiers "Application traffic monitoring" for Advanced. However in the FAQ: "In addition, customers can also use AWS WAF to protect against Application layer attacks". WAF is only available through CloudFront, and CloudFront charges 600 dollars a month for a custom SSL certificate with dedicated IP. So do they have "Application t…

for $3k/month i wouldn't expect a competent human being to be on call 24/7, which is what you're asking for.

this is one thing that does not enjoy economies of scale. competent people working under pressure at 3AM on a holiday are extremely expensive.

would _you_ do that job? and how much do you get paid?

Post reply on HN