Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hosting your static site with AWS S3, Route 53, and CloudFront for free

vickylai.com

Post reply on HN
Print view View original

21–30 of 51 posts

Re: Hosting your static site with AWS S3, Route 53, and CloudFront for free

#21

Post by ryanf323 »

diggan wrote: post #17
ryanf323 wrote: post #15

Earlier quoted context omitted.

Geo Restrictions on the Cloudfront distribution and a WAF will go a long way in mitigating against abuse and unnecessary costs.

Which locations are you gonna restrict from using your website? Is that how you want the web to generally work? WAF also doesn't seem to be free, where did you read that?

Typically, you restrict countries that you receive abusive traffic from and do not have any business in.

"Is that how you want the web to generally work?"

My suggestions on ways to prevent paying for CloudFront charges from junk requests are not prescriptive. However, they are AWS best practices when dealing with DDoS.

https://aws.amazon.com/answers/networking/aws-ddos-attack-mi...

Re: Hosting your static site with AWS S3, Route 53, and CloudFront for free

#22

Post by StudentStuff »

Zekio wrote: post #13
bdcravens wrote: post #10

Earlier quoted context omitted.

Ignoring the party that is keeping your server up etc, don't most ISPs block 80/443?

I think that depends highly on which country you are in, I've never experienced this in Denmark before EDIT: and I've used pretty much all the ISPs we have around

Same here stateside, neither Comcast, Centurylink, Cox, Charter, Wave, Verizon or Frontier blocks port 80 or 443. Some do block mail ports 25 & 587, Comcast & Centurylink leaves these mail ports open unless you do some spamming (then you have to call and have 'em unblock them).

Re: Hosting your static site with AWS S3, Route 53, and CloudFront for free

#25

Post by andrewaylett »

derefr wrote: post #19
always_good wrote: post #9

I liked CloudFront until I realized that getting DDoSed also DDoSes your wallet.

.

CloudFront is AWS's CDN product, and is charged on volume. CloudFlare is a separate company that sits in a similar place in your service map, but is very differently priced.

Re: Hosting your static site with AWS S3, Route 53, and CloudFront for free

#27

Post by diggan »

ryanf323 wrote: post #18
diggan wrote: post #17

Earlier quoted context omitted.

Which locations are you gonna restrict from using your website? Is that how you want the web to generally work? WAF also doesn't seem to be free, where did you read that?

I never said WAF was free. Where did you read that?

Sorry, assumed you hinted at that since that was the premise of the article linked here.

Re: Hosting your static site with AWS S3, Route 53, and CloudFront for free

#28

Post by diggan »

ryanf323 wrote: post #21
diggan wrote: post #17

Earlier quoted context omitted.

Which locations are you gonna restrict from using your website? Is that how you want the web to generally work? WAF also doesn't seem to be free, where did you read that?

Typically, you restrict countries that you receive abusive traffic from and do not have any business in. "Is that how you want the web to generally work?" My suggestions on ways to prevent paying for CloudFront charges from junk requests are not prescriptive. However, they are AWS best practices when dealing with DDoS. https://aws.amazon.com/answers/networking/aws-ddos-attack-mi...

Guess we're living very different lives on the same web. "do not have any business in." is not something I'm familiar with on the web, as the part of the web I love is the one without borders. But each to their own :)

Re: Hosting your static site with AWS S3, Route 53, and CloudFront for free

#29

Post by RKearney »

StudentStuff wrote: post #22
Zekio wrote: post #13

Earlier quoted context omitted.

I think that depends highly on which country you are in, I've never experienced this in Denmark before EDIT: and I've used pretty much all the ISPs we have around

Same here stateside, neither Comcast, Centurylink, Cox, Charter, Wave, Verizon or Frontier blocks port 80 or 443. Some do block mail ports 25 & 587, Comcast & Centurylink leaves these mail ports open unless you do some spamming (then you have to call and have 'em unblock them).

Port 25 is blocked for every residential Comcast customer.

Re: Hosting your static site with AWS S3, Route 53, and CloudFront for free

#30

Post by derefr »

andrewaylett wrote: post #25
derefr wrote: post #19

Earlier quoted context omitted.

.

CloudFront is AWS's CDN product, and is charged on volume. CloudFlare is a separate company that sits in a similar place in your service map, but is very differently priced.

Oops, I misread, sorry!
Post reply on HN