Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AWS Shield – Managed DDoS Protection

aws.amazon.com

Post reply on HN
Print view View original

61–70 of 79 posts

Re: AWS Shield – Managed DDoS Protection

#61

Post by dsmithatx »

snowwrestler wrote: post #52
beachstartup wrote: post #40

Earlier quoted context omitted.

for $3k/month i wouldn't expect a competent human being to be on call 24/7, which is what you're asking for. this is one thing that does not enjoy economies of scale. competent people working under pressure at 3AM on a holiday are extremely expensive. would _ you _ do that job? and how much do you get paid?

Rackspace and DosArrest are two companies that currently provide me with competent support 24/7 for products that cost less than $3k/month. They're out there, you just have to look.

No one in this thread bothered to check Amazon support pricing. It's $100/month.

https://console.aws.amazon.com/support/plans/home?region=us-...

Re: AWS Shield – Managed DDoS Protection

#62

Post by comex »

Eldt wrote: post #49
RhodesianHunter wrote: post #42

Earlier quoted context omitted.

How often are people on a budget the target of serious ddos attacks?

A lot of game servers (eg Minecraft) get DDoSed by competitor servers or players as revenge

More generally: I think a decent fraction of the people who think DDoSing is an appropriate way to deal with personal vendettas are kids. The targets of kids' vendettas are often also kids. Kids tend to have low budgets. (The budget required to launch a DDoS, through one of the many commercial websites that sell them, is pretty low.)

Re: AWS Shield – Managed DDoS Protection

#63

Post by Someone1234 »

dsmithatx wrote: post #61
snowwrestler wrote: post #52

Earlier quoted context omitted.

Rackspace and DosArrest are two companies that currently provide me with competent support 24/7 for products that cost less than $3k/month. They're out there, you just have to look.

No one in this thread bothered to check Amazon support pricing. It's $100/month. https://console.aws.amazon.com/support/plans/home?region=us-...

$100/month is the MINIMUM for Business tier support. If you spend $2K on AWS services then it is $200, $3K is $300, $4K is $400, and so on... Up until $10K total AWS spend then it drops from 10% of spend to 7%, and from 7% to 5% over $80K.[0]

Enterprise tier's minimum is $15K by the way.

And the Business Tier lacks "Business-critical system down" support with a 15 minute response time. But it does have the "Production system down" level with a "less than 1 hour" response.[1]

AWS's support isn't cheap. And it isn't simply "$100/month" that's the minimum for real support (and no, developer tier isn't real support for production systems).

[0] https://aws.amazon.com/premiumsupport/pricing/

[1] https://aws.amazon.com/premiumsupport/compare-plans/

Re: AWS Shield – Managed DDoS Protection

#64

Post by bigiain »

nilved wrote: post #60
bigiain wrote: post #53

Earlier quoted context omitted.

They should make it a first class option - to spend less money with them? AWS is the ultimate "wire it together yourself" tool. If that's _not_ what you're after, there are many other vendors eager to take your money.

This is really just apologizing for bad UX. Bad UX in the best case, dark pattern in the worst case.

I don't think so - from my perspective it's more like a misunderstanding on some people's part of what AWS is.

It's a practically unlimited scale-to-the-moon platform that allows you to provision hundreds or thousands of virtualised bits of internet infrastructure in seconds or minutes - and automate it all.

All their "light pattern" UX is laser focused on allowing you to instantly provision all the capacity you ask for.

If you expect a UX oriented to "cost minimisation" or "potential user error protection", AWS is the wrong choice of tool. You can still use it, but what seems to you to be "Bad UX" or "dark patterns" can easily be explained as "you chose the wrong tool" if you view AWS from a different angle (and I'd argue, that angle is the one all AWS's 7 digit per month customers see it from, and hence the way the AWS team builds and prioritises everything)

Re: AWS Shield – Managed DDoS Protection

#65

Post by dangrossman »

dx034 wrote: post #20
dangrossman wrote: post #9

Earlier quoted context omitted.

That's $2000/month cheaper than Cloudflare Enterprise. I imagine they have the same target customer?

Do you have a source for the $5000 number? Heard it's more around 3k. But guess it's on an individual basis. And at Amazon that's just the ddos costs, the cdn and traffic cost extra.

https://support.cloudflare.com/hc/en-us/articles/200170326-H...

Re: AWS Shield – Managed DDoS Protection

#66

Post by carterehsmith »

Rapzid wrote: post #29
carterehsmith wrote: post #27

Earlier quoted context omitted.

As per the pricing page, looks like you _do_ need support plan: "AWS Shield Advanced is available to customers who are enrolled in either the Enterprise or Business Support levels of AWS Premium Support." https://aws.amazon.com/shield/pricing/

Oh wow, thanks! I hadn't noticed that yet :| So many caveats to this thing. Look like I'd need to pony up >1k/mo on top of 3k to get access to the service then...

Hmmm, reading further, there is a 12-month commitment on the $3,000/month plan.

So if you get hit by DDOS, you can't just pay $3,000 and hope that DDOS is gone within a month. Looks like you have to sign up for a year's worth of protection.

Re: AWS Shield – Managed DDoS Protection

#67

Post by swozey »

mtberatwork wrote: post #11
Artemis2 wrote: post #8

> AWS Shield Advanced comes with “DDoS cost protection”, a safeguard from scaling charges as a result of a DDoS attack that cause usage spikes on Elastic Load Balancing (ELB), Amazon CloudFront or Amazon Route 53. If any of these services scale up in response to a DDoS attack, AWS will provide service credits for charges due to usage spikes. This is a very big deal!

AWS Shield Advanced though...so what does this mean if you are on Standard ? One of the biggest fears is launching an EC2 instance (or some other service) only to get hit at some random point in time with a DDoS attack and a large bill at the end of the month. I've read stories of AWS forgiving events like this, but are you now up a creek if you don't subscribe to their "Advanced" tier?

I hear this all the time, people being surprised by an $80k bill when they're used to $5k. Step one of using any of these services, whether it's AWS, GCP, Azure, etc. ENABLE BILLING ALERTS. You can be notified as soon as you're being charged x%, or $x over last months bill, or set your own amounts and hop on and investigate what's going on. Please set this up. If you don't have this on right now, stop what you're doing and turn it on.

This is the first thing that I do any time I'm involved with a new infrastructure.

Re: AWS Shield – Managed DDoS Protection

#68

Post by Rapzid »

dsmithatx wrote: post #59
Rapzid wrote: post #29

Earlier quoted context omitted.

Oh wow, thanks! I hadn't noticed that yet :| So many caveats to this thing. Look like I'd need to pony up >1k/mo on top of 3k to get access to the service then...

See above, business level support 24/7 with phones is $100/month.

For people paying less than 1k on their bill, or am I missing something? I feel pretty confident in the layout I... Laid out.

Re: AWS Shield – Managed DDoS Protection

#69

Post by bloomark »

madeofpalk wrote: post #55
nate_martin wrote: post #30

Earlier quoted context omitted.

For someone familiar with the products, yes. But for someone new to AWS most of these options don't make sense. I'm looking at a menu with hundreds of options like Snowglobe and Beanstalk and I have no idea where to start. Are they trying to brand their trademarks as the defacto name for the service (like Kleenex and ChapStick have done)?

Oh, all of AWS is terribly not-intuitive to use. Just creating an EC2 instance is amazingly complicated.

Made so much easier with lightsail - https://lightsail.aws.amazon.com/ls/webapp/home/resources

Re: AWS Shield – Managed DDoS Protection

#70

Post by Spooky23 »

Someone1234 wrote: post #63
dsmithatx wrote: post #61

Earlier quoted context omitted.

No one in this thread bothered to check Amazon support pricing. It's $100/month. https://console.aws.amazon.com/support/plans/home?region=us-...

$100/month is the MINIMUM for Business tier support. If you spend $2K on AWS services then it is $200, $3K is $300, $4K is $400, and so on... Up until $10K total AWS spend then it drops from 10% of spend to 7%, and from 7% to 5% over $80K.[0] Enterprise tier's minimum is $15K by the way. And the Business Tier lacks "Business-critical system down" support with a 15 minute response time. But it does have the "Productio…

That's not that expensive.

If you bought a rack of servers and storage from HP, IBM or Dell and wanted a tier that got you to an engineer in <15m, that would cost far more.

Post reply on HN