Live data from Hacker News

Google App Engine 1.7.0 available to download

developers.google.com

1–10 of 20 posts

Re: Google App Engine 1.7.0 available to download

#5
post #3

Finally, SSL for custom domains: https://developers.google.com/appengine/docs/ssl

And it costs $99/month. Hmm. (I'm not considering SNI since IMHO it's a non-starter not being supported by XP.)

Lack of custom SSL was the main issue preventing me from considering App Engine for my web service, so I'll definitely have to revisit it to see how it could compare to AWS in production.

Re: Google App Engine 1.7.0 available to download

#7
post #5
post #3

Finally, SSL for custom domains: https://developers.google.com/appengine/docs/ssl

And it costs $99/month. Hmm. (I'm not considering SNI since IMHO it's a non-starter not being supported by XP.) Lack of custom SSL was the main issue preventing me from considering App Engine for my web service, so I'll definitely have to revisit it to see how it could compare to AWS in production.

Alternatively I guess you could detect non-SNI browsers and redirect them to appspot.com instead, but that feels a little messy.

Re: Google App Engine 1.7.0 available to download

#10
post #6
post #3

Finally, SSL for custom domains: https://developers.google.com/appengine/docs/ssl

I wonder why did this feature take 4 years to happen.

The Cloudflare blog post about how they tried to work-around it is a pretty good explainer on the underlying issue. http://blog.cloudflare.com/ssl-on-custom-domains-for-appengi...

>>>Here's a bit of detail on the core problem. SSL is tied to a particular domain and, usually, an IP address. Managing SSL certificates in an elastic cloud environment is non-trivial. As a result, many cloud providers don't support SSL at all or, like AppEngine, create a wildcard SSL cert for their domain and force everyone who wants SSL to send requests to that. Unfortunately, if you try and make a request to AppEngine from your own domain then the SSL certificate won't validate. We initially thought we could solve this as a proxy just by ignoring SSL errors from the origin, but AppEngine also routes based on the host header. If the host header isn't a subdomain off appspot.org then traffic gets rerouted to the Google home page.

Post reply on HN