Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

aws.typepad.com

Post reply on HN
Print view View original

11–20 of 31 posts

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#11

Post by bdb »

pfg wrote: post #2

Pricing, since it's not explicitly mentioned in the blog post: You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This monthly fee is pro-rated by the hour. For example, if you had your custom SSL certificate associated with at least one CloudFront distribution for just 24 hours (i.e. 1 day) in the month of June, your total charge for using the custom SSL cert…

If they're not using SNI, this is reasonable. Hopefully they're not using SNI.

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#12

Post by legutierr »

bdb wrote: post #11
pfg wrote: post #2

Pricing, since it's not explicitly mentioned in the blog post: You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This monthly fee is pro-rated by the hour. For example, if you had your custom SSL certificate associated with at least one CloudFront distribution for just 24 hours (i.e. 1 day) in the month of June, your total charge for using the custom SSL cert…

If they're not using SNI, this is reasonable. Hopefully they're not using SNI.

I'm curious, in addition to a lack of compatibility with Windows XP and early versions of certain browsers, is there any other reason that one wouldn't want to use SNI?

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#13

Post by pfg »

bdb wrote: post #11
pfg wrote: post #2

Pricing, since it's not explicitly mentioned in the blog post: You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This monthly fee is pro-rated by the hour. For example, if you had your custom SSL certificate associated with at least one CloudFront distribution for just 24 hours (i.e. 1 day) in the month of June, your total charge for using the custom SSL cert…

If they're not using SNI, this is reasonable. Hopefully they're not using SNI.

Considering the number of IP addresses they'll probably have to dedicate to every CF distribution with a custom certificate (at least one for each edge location), it's definitely reasonable.

That being said, I'm hoping they'll switch to SNI at some point. Windows XP won't be around forever (well, one can hope...). IMHO SNI is the better long-term solution (especially when it comes to costs), so once the number of clients not supporting SNI drops to a negligible number, they should go for it.

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#14

Post by cperciva »

ceejayoz wrote: post #9
cperciva wrote: post #4

Earlier quoted context omitted.

You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This is... impressively expensive.

Not when you think about what's going on behind the scenes. There are 40 CloudFront datacenters, which means all 40 of them have to have a dedicated IP and setup just for you and your SSL certificate.

If they're not using SNI I agree that it would be expensive... not necessarily that expensive, though. Elastic IP addresses cost $0.005/hour, which is about $3.60/month; multiply that by 40 datacenters and you've got $144/month worth of IPs, not $600.

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#16

Post by donavanm »

legutierr wrote: post #12
bdb wrote: post #11

Earlier quoted context omitted.

If they're not using SNI, this is reasonable. Hopefully they're not using SNI.

I'm curious, in addition to a lack of compatibility with Windows XP and early versions of certain browsers, is there any other reason that one wouldn't want to use SNI?

theres the (lack of) security when the client advertises the expected cert cn outside of the secure session. bu the real reason is simply client support. last i looked about 50% of requests looked like they came from clients that didnt support sni. suppose a ridiculously optimistic estimate of 90% support. is it acceptable for 10% of your clients to have security warnings when visiting your site? that's an unacceptable customer experience, personally.

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#17

Post by nilsbunger »

legutierr wrote: post #12
bdb wrote: post #11

Earlier quoted context omitted.

If they're not using SNI, this is reasonable. Hopefully they're not using SNI.

I'm curious, in addition to a lack of compatibility with Windows XP and early versions of certain browsers, is there any other reason that one wouldn't want to use SNI?

Python 2's standard library also doesn't support SNI. Nor does Android 2.x browser.

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#18

Post by donavanm »

cperciva wrote: post #4
pfg wrote: post #2

Pricing, since it's not explicitly mentioned in the blog post: You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This monthly fee is pro-rated by the hour. For example, if you had your custom SSL certificate associated with at least one CloudFront distribution for just 24 hours (i.e. 1 day) in the month of June, your total charge for using the custom SSL cert…

You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This is... impressively expensive.

do note that it's per cert. you could, for example, use a wildcard cert and serve multiple distributions & fqdns off a single cert.

ps: check out the insane pricing for dedicated certs & https on some other CDNs. $600/mo doesnt look too excessive in comparison.

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#19

Post by eli »

Afforess wrote: post #6
cperciva wrote: post #4

Earlier quoted context omitted.

You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This is... impressively expensive.

Not compared to how expensive CloudFront is. cough

I guess it depends on what scale you're at. Granted it was a few years ago, but I had a hard time getting the big name CDNs to give me the time of day without spending at least a few grand a month.

Re: Custom SSL Domain Names and Root Domain Hosting for Amazon CloudFront

#20

Post by lost-theory »

cperciva wrote: post #4
pfg wrote: post #2

Pricing, since it's not explicitly mentioned in the blog post: You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This monthly fee is pro-rated by the hour. For example, if you had your custom SSL certificate associated with at least one CloudFront distribution for just 24 hours (i.e. 1 day) in the month of June, your total charge for using the custom SSL cert…

You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions. This is... impressively expensive.

I think it's the going rate. A wildcard cert from edgecast is similarly priced (plus a setup fee).
Post reply on HN