Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I got pwned by my cloud costs

troyhunt.com

Post reply on HN
Print view View original

111–120 of 657 posts

Re: I got pwned by my cloud costs

#111

Post by omegalulw »

bennyp101 wrote: post #72
lpcvoid wrote: post #56

Can somebody explain to me why I wouldn't just rent a 40 EUR dedicated server from Hetzner with unlimited traffic and gigabit uplink? His 600GB/day is way less than what you get over a gigabit link within a day. Sure, sudden bursts would perhaps "throttle" at a gigabit, but according to his article that was only the cloudflare proxy anyhow, so no pain in having that take a few seconds longer. As far as I am concerned…

Because it's not cool, and won't make your CV sparkle. I'm sure there becomes a point where cost of (hardware + maintenance + staffing) > (cloud + staffing), in which case sure crack on. But like you, I'll stick to a rented server for my stuff.

The direction is opposite IMO. As you grow bigger on prem starts making a lot more sense.

Re: I got pwned by my cloud costs

#112

Post by audiometry »

csours wrote: post #106
fs111 wrote: post #69

Earlier quoted context omitted.

Sounds like a pretty expensive privilege. How is using cloudflare okay in this then? Cloudflare is also not Azure

I don't think Azure offers a Cloudflare alternative, and I'm not sure they ever would - Cloudflare is too good and too cheap to compete against.

It's not that good. I'm constantly getting "Access Blocked" to various websites by Cloudflare trying to protect them....from me reading them.

Re: I got pwned by my cloud costs

#113

Post by goodguyamericun »

asadlionpk wrote: post #34
stevehind wrote: post #5

Have you contacted Azure? On one hand you owe the money “fair and square”, but on the other if I were them I’d waive an unexpected $10k bill to a good faith actor that was incurred without any proactive notification by Azure.

OP do this! It works, they are usually very generous (same for gcloud!)

Op is Troy hunt, an ms MVP. You can bet there are people from MS doing it for him as soon as they got wind

Re: I got pwned by my cloud costs

#116

Post by knorker »

Aissen wrote: post #63
knorker wrote: post #41

As soon as I saw "17GB file" i thought "that's what torrents are for". Otherwise one mistake and... Well this happens. Or someone maliciously bypasses CF cache e.g. by parameters. Cloud just is not suitable for any kind of volume egress. It's a death trap. Like going on vacation with data roaming enabled.

Yeah, HIBP is using torrents: > I removed the direct download links from the HIBP website and just left the torrents which had plenty of seeds so it was still easy to get the data. Since then, Cloudflare upped that 15GB limit and I've restored the links for folks that aren't in a position to pull down a torrent. Crisis over.

I know, I read the article.

But I feel like Dr Strangelove here. Of course, the whole point of a torrent on a cloud service is lost if you also provide a raw download link.

Also providing a download link is tempting, but can easily cost (for a 17GB file and growing) up to US $3 per click.

Even off of their premium global network it's over $2 per click. The cheapest in Microsofts entire egress table would be $0.68 per click. (but that only kicks in after you've spent way more than $9400 in cheaper tiers in a given month)

Egress kills you, in cloud. "Oh, cloudflare probably caches most of this" is not something I'd recommend.

Re: I got pwned by my cloud costs

#117

Post by alfiedotwtf »

usr1106 wrote: post #23

That's the typical story. Something goes wrong and it costs you (typically a small company) a lot of money. At that time just nobody is looking at metrics. Even alarms don't help absolutely because they can also be missed. The only thing that would really help were a hard spending limit that stops all services except storage. If your site is important there will be such an amount of user feedback that it is impossibl…

> The only thing that would really help were a hard spending limit that stops all services except storage.

Sadly, I haven't found a way to do that with AWS

Re: I got pwned by my cloud costs

#118

Post by jve »

> I, uh, have a bill I need to pay

Kind of sad that service we are accustomed to using, various software integrates it (whether using HIBP API or downloaded pwned passwords archive) - is on a shoulder of single guy that now has to pay for his mistake.

Great that Cloudflare helps him with the service, otherwise who knows if we had access to HIBP at this scale?

Re: I got pwned by my cloud costs

#119

Post by ghughes »

fuzzy2 wrote: post #84
lpcvoid wrote: post #56

Can somebody explain to me why I wouldn't just rent a 40 EUR dedicated server from Hetzner with unlimited traffic and gigabit uplink? His 600GB/day is way less than what you get over a gigabit link within a day. Sure, sudden bursts would perhaps "throttle" at a gigabit, but according to his article that was only the cloudflare proxy anyhow, so no pain in having that take a few seconds longer. As far as I am concerned…

That dedicated server you have to manage (ensure security, install the software you need, keep it updated and secure etc). It’s not for everyone. Also, as you can see in a screenshot on TFA: Some services are simply dirt cheap. The storage account and its various “sub-services” is such a thing. It’s hard to compete with dedicated hardware here. Depending on your dedicated hosting provider, the traffic cost trap exist…

> ensure security, install the software you need, keep it updated and secure etc

These things are now trivial enough that it doesn't make sense to pay 10x the cost of bare metal for a cloud provider to solve them for you unless you have a crazy amount of runway or absolutely no idea what you're doing.

Re: I got pwned by my cloud costs

#120

Post by dx034 »

hardwaresofton wrote: post #73
lpcvoid wrote: post #56

Can somebody explain to me why I wouldn't just rent a 40 EUR dedicated server from Hetzner with unlimited traffic and gigabit uplink? His 600GB/day is way less than what you get over a gigabit link within a day. Sure, sudden bursts would perhaps "throttle" at a gigabit, but according to his article that was only the cloudflare proxy anyhow, so no pain in having that take a few seconds longer. As far as I am concerned…

Well there’s a gap between the amount of convenience you get on the major clouds and one like Hetzner. I’m a huge Hetzner fan, and their cloud offering is definitely growing but still isn’t as convenient and featureful as it could be (and they don’t share their roadmap currently so hard to tell what they’re working on next). I’m trying to do something about it though, working on Nimbus Web Services[0]. In my mind all…

But he could've put static files on a Hetzner server and still have his backend in Azure. That would've solved these issues and probably saved even more money.
Post reply on HN