Seems very inspired by Molly White's page [0] [0] https://www.web3isgoinggreat.com/
This is brilliant, there goes my afternoon. Thank you
Serverless Horrors
61–70 of 174 posts
Re: Serverless Horrors
#62Earlier quoted context omitted.
I remember a comment from this site. Something like: we must study how Amazon and other big cloud's marketing work so great to make this generation developers think that vps or selfhosting are hard. IMO vps was easy before and even easier now to manage.
Please explain how you rotate ssh keys, store audit logs, backup (and test backup procedures), configure secure network between vpses such that your neighbor cannot eavesdrop.
I think on a $5 vps that you're using to host a small website you simply just don't do those things.
Re: Serverless Horrors
#63Earlier quoted context omitted.
... which you generally get with serverless offers.
Correlation does not imply causation. There is no inherent reason why a serverless architecture would force a provider to have insane high traffic costs, hence it doesn't make sense to put blame on the term "serverless" for that. On the other hand, if one could explain such causation, then I would be very interested in hearing about it.
Strong correlation is enough to advise against using serverless to people who might not be experts and might easily fall into such traps.
Re: Serverless Horrors
#64Silly question, but while you're still at the making (expensive) mistakes stage, why not set up a cheap on-prem box that can be switched off/trashed with ease? When you're satisfied that you've fixed all the obvious weaknesses, move the software to The Cloud. Or am I missing the point?
Re: Serverless Horrors
#65Earlier quoted context omitted.
Cloudflare has DDOS protection which you can set to basically paranoid and once a DDOS starts then everyone will get a captcha. This limits your spend quite effectively.
And also stop me accessing the site entirely. I don't know why, but every site with CF DDoS protection set to paranoid gives me infinite captchas that I can never pass.
For me this happens because of some combination o|
- firefox - userAgent spoofing claiming I'm chrome - pihole
If I change enough of these, I get through the infinite loop. Does not make me happy.
Re: Serverless Horrors
#66Earlier quoted context omitted.
It used to be we will take your server down. Now its we'll DDOS your serverless website and leave you a 100k bill. I'm not sure how sustainable such business model is. When you owned the server, you could unplug it. Now you have no way of knowing if somebody is going to hit your /api a million times per minute
I also prefer to get a (decaf) coffee, listen to some music while someone DDoS'd my VPS. I prefer to pay few $ / month for my VPS instead of paying thousands and "survive" the DDoS.
I pay $10/year for my VPS and host a WordPress Woocommerce store on it... It doesn't get much traffic, but it didn't take long to pay for itself either
Re: Serverless Horrors
#67Earlier quoted context omitted.
I remember a comment from this site. Something like: we must study how Amazon and other big cloud's marketing work so great to make this generation developers think that vps or selfhosting are hard. IMO vps was easy before and even easier now to manage.
Please explain how you rotate ssh keys, store audit logs, backup (and test backup procedures), configure secure network between vpses such that your neighbor cannot eavesdrop.
For my personal stuff, when it comes to SSH key rotation and secure networks, I like to let Tailscale deal with both. It handles SSH authentication for you via your SSO provider, so there's no need to rotate keys.
(Aside: you shouldn't really be using SSH keys to begin with at anything but a small scale. SSH certificates are much more flexible)
Re: Serverless Horrors
#68Also see the Netlify comment thread linked from one of the Reddit posts ( https://answers.netlify.com/t/limit-bandwidth-to-avoid-high-... ), where one of their representatives specifically says that if you suffer a DDOS they will do nothing to stop you from getting a bajillion-dollar bandwidth bill, even if you're on the "free" tier.
Can you use free tier under a fake name? To drop ridiculous bills. How do they validate the customer?
There is no free plan, there is just free limit - you must add a card.
Re: Serverless Horrors
#69These are just cost nightmares, what I love (hate) is when said serverless gives you the any kind of bizarre errors and some solutions require you to do some arcane "saw it on stackoverflow sub-comment".
Oh and it's not like you can jump into the console to debug.
I gave up after not even vercel could figure it out and merely told me that I should replace said package.
Re: Serverless Horrors
#70Earlier quoted context omitted.
Can you use free tier under a fake name? To drop ridiculous bills. How do they validate the customer?
There is no free plan, there is just free limit - you must add a card.
And what if you add a debit card without money? Or add a disposable card and then the next day you deactivate it?
Nowadays everyone push you to add a card to open free* account. Such disposable cards is a solution to this issue.