Live data from Hacker News

Linode launches free DDoS protection

linode.com

111–120 of 182 posts

Re: Linode launches free DDoS protection

#111
post #87

Earlier quoted context omitted.

Linode's origin is as a VPS provider. OVH's is as a dedicated server provider. OVH's top server is twice the cost of Linode's and their cheapest is 5x the price (10 vs ~50).

Comparing prices for bare metal with prices for shared infrastructure is pretty much useless though.

Why is that?

Re: Linode launches free DDoS protection

#112
Is it free [1], free* [2] or "free" [3]?

[1]: free as in free beer, at no direct cost to users

[2]: terms and conditions apply, free until you hit certain conditions (for example, constant barrage)

[3]: free as in the customers pay for the (mandatory) DDoS protection via increased prices (similar to how I remember OVH handling their "free" DDoS protection)

Re: Linode launches free DDoS protection

#113
post #75

Earlier quoted context omitted.

I’m curious, does anyone know what that means specifically? How can they differentiate normal traffic from malicious traffic? What exactly triggers it? Is a ping flood with a slow (50mbits) internet connect enough? I am aware that the details are mostly likely private to protect them from abuse and are also a trade secret but I have a very hard time to find a general approach that might be similar to their solution?

Most probably they have DDoS appliances (i.e. Arbor, corero, etc) installed in their network. One of the implementation is they will redirect all customer traffic to this appliance. And then the appliance will get some sample of the traffic and match it with their attack fingerprints database. If matched they will block the traffic. For the good traffic they will let it go to its final destination.

They have their own system (a friend worked on it). I don't know the details of the system though

Re: Linode launches free DDoS protection

#114
post #59
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

Linode gives me 1000GB of transfer for the $5 it costs me to rent a vm, while AWS would charge me $150 for just that bandwidth by itself.

Do you actually use it?

Re: Linode launches free DDoS protection

#115
post #39

Earlier quoted context omitted.

They are very likely real and OVH has a very good system. You can thank them for making free DDoS protection mainstream, dragging all other hosts kicking and screaming into providing DDoS protection. In the past providers like Linode were happy to just null route your IP for several hours/days or charge you thousands to block a small flood.

> You can thank them for making free DDoS protection mainstream AWS does charge for WAF and Shield, I believe. I also remember comparing AWS Lambda at Edge vs Cloudflare Workers (though Lambda allows for longer execution times and generally provides more flexibility like RAM, CPU, Runtimes since it runs on a Linux VM vs V8 Isolates for Workers), costs were something like 10x apart. Can't wait for WebSockets support f…

> I also remember comparing AWS Lambda at Edge vs Cloudflare Workers ... costs were something like 10x apart.

According to the AWS pricing example[1] 10 million requests per month on Lambda@Edge costs $9.13. The same thing on Cloudflare Workers[2] costs $5.00. So I would expect it to be closer to 2x. Although as you say there's a bit more flexibility with Lambda@Edge so it'll depend on your particular case.

I'm curious if your situation was different somehow that made for such a big cost difference between the two?

[1]https://aws.amazon.com/lambda/pricing/#Lambda.40Edge_Pricing [2]https://workers.cloudflare.com/#plans

Re: Linode launches free DDoS protection

#117
post #41
post #34

Earlier quoted context omitted.

Amazon Lightsail launched way after Linode and DO have been established in the low-cost segment, and it was slightly more expensive than Linode and DO when it launched. It appears they've lowered their prices again in order to capture the market but mind share is still low.

Last time I tested it Amazon Lightsail was also way slower.

It is. The "1 vcpu" is basically a lie. They throttle Lightsail viciously based on use.

Re: Linode launches free DDoS protection

#118
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

I work fulltime on an ecommerce platform deployed in AWS and part time on a number of small side projects on a Digital Ocean droplet. Managing infra on AWS is a big, complex undertaking with lots to learn. With my droplet I need to know some bits of Linux sysadmin (how to update it, install fail2ban and other small things). Deploying is via a bash script that basically builds, tarballs, scp’s then restarts server.

Basically for small, simple applications, Linode or DO are great. They’re simple, the pricing is simple.

For more complex applications with lots of components, service buses, microservices etc, bigger cloud services offer you lots of features, but it gets difficult to operate if you’re just one guy (IME).

Re: Linode launches free DDoS protection

#119
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

On my part, I prefer Linode now simply because I won't support a company as openly monopolistic as .. those guys .. if I can avoid it. Also, maybe a little superficial loyalty. Linode was the first provider I found with KVM support when it was a new feature in QEMU, but that reasoning is long expired.

I like Linode and DO and have my issues with the big cloud players, but I don’t see them as monopolistic at all? There are multiple highly competitive offerings in the market, each competing on features and cost. You have lots of choice and even vendor lock in is somewhat mitigable if you want to put the effort in.

Re: Linode launches free DDoS protection

#120
post #89

Earlier quoted context omitted.

You start using GCP/AWS/Azure, you're going to start using managed databases, security groups, etc. These are really nice. They can save you a lot of time as a startup. ... They are incredibly difficult to migrate. If you use terraform, it does support GCP/AWS/Azure/DO/Vultr, but you'll have to rewrite everything for each provider. For really simple providers (just a VM; in AWS, just EC2) you can still write all your…

> Now we see Linode offering DDOS (maybe saving you money from paying CloudFlare)? I work for Cloudflare, and we do not charge you money for our DDoS protection. It's free and included on every plan level including our free level, and the protection you get is equal to the protection our enterprise customers get. In other product features we have we also work hard to make sure we do not charge you for any bad traffic…

As a very satisfied CloudFlare customer (read "leech", since I'm using the free tier), I have seen your dashboard serve 300 GB of data for me some days, which never reached my server because of caching. It would be nice to be able to see a list of the ten most bandwidth-using URLs for a period, so I can maybe save you some bandwidth in case it's an attack or something similar.

Currently, since I use caching, I never see what consumed the bandwidth, so I don't know what file people are downloading so much.

(P.S. Hey David, long time! I hope everything is going well)

Post reply on HN