Live data from Hacker News

DigitalOcean VPC

blog.digitalocean.com

141–150 of 169 posts

Re: DigitalOcean VPC

#141
post #78
post #77

Earlier quoted context omitted.

I cannot seem to find AWS bandwidth pricing. Only thing I found was some blogpost from 2011. How do I check this out?

Ok, it seems to show up at calculator.aws when you go to "advanced" section

Yeah it's ridiculously obscured, which is partly how it suprised me so much. I hadn't seen the charge mentioned anywhere. That alone seems like it should send up giant red flags of bad business practice.

Re: DigitalOcean VPC

#142

Earlier quoted context omitted.

Guess who‘s favorite evil corp cloud is a magnitude cheaper than AWS on transfer pricing? Oracle, which is why Zoom just signed a deal. https://www.lastweekinaws.com/blog/why-zoom-chose-oracle-clo...

Oracle cloud? The same technology that runs certain state unemployment systems and has been completely unable to scale, leaving hundreds of thousands of people with no income for the last five weeks? Oracle really should remove its logo from the footers of all those collapsing web sites. It's embarrassing.

> Oracle really should remove its logo from the footers of all those collapsing web sites.

Why remove the logo if you can't see the website? ;)

Re: DigitalOcean VPC

#143

Earlier quoted context omitted.

Digital Ocean's bandwidth pricing is pretty solid at $10/TB. It's pooled between droplets, too, so it's often cheaper to spool up a few droplets you're not using to get slightly better bandwidth prices if you use a lot. Sadly, I just missed out on being grandfathered in at free bandwidth, which would have been great for my PortableApps.com open source project. We'll be hitting 100 TB a month soon across all downloads…

PortableApps.com looks like an interesting project. Could you give me a quick technical explanation of what it does?

It allows you to use Windows apps without needing to install them into Windows, so you can sync it between machines in a cloud folder like Dropbox/Google Drive, carry it on an external flash/hard drive, or use it on a machine you may not have install rights to. You can also keep separate copies of the same app for work and personal on the same Windows account. It's packaged as an app manager with a start menu, app store, automatic software updater, backup/restore functionality, etc.

On the technical side, we make use of an apps ability to direct where it stores its settings if it has one, and also move settings into/out of the registry and/or APPDATA on the local machine when needed. Our open source 'launcher' acts as a helper app to handle this for each app so it doesn't mess up a local version that's already there and so it adjusts paths if you move around between PCs and the paths to your apps or documents change.

Re: DigitalOcean VPC

#144
post #126

Earlier quoted context omitted.

Same here, happy customer for 4 years. Currently we have ~60 VMs of different sizes (down from ~100 before COVID lockdown). My main wish at this point is cross data center load balancers.

What do you use all the VMs for, if you don't mind me asking?

It's not a personal project, but for work. Basically to run our mobile backend (nginx, spring boot, mongodb, rabbitmq, etc), staging and production. And all that needs redundancy of course.

We manage them using Ansible.

Re: DigitalOcean VPC

#145

Earlier quoted context omitted.

PortableApps.com looks like an interesting project. Could you give me a quick technical explanation of what it does?

It allows you to use Windows apps without needing to install them into Windows, so you can sync it between machines in a cloud folder like Dropbox/Google Drive, carry it on an external flash/hard drive, or use it on a machine you may not have install rights to. You can also keep separate copies of the same app for work and personal on the same Windows account. It's packaged as an app manager with a start menu, app st…

Very interesting, thank you!

Re: DigitalOcean VPC

#146
post #137

Earlier quoted context omitted.

As a (former) network security guy, I shudder at the thought that you WANT to expose your internal routing details. That's a recipe for security disaster. It is also an administration problem - you've given out an internal IP network to someone else -- and now your ability to move it to a different IP address for whatever reason depends on the change processes at the other enterprise, which can take months -- or on t…

I don't get this. IPv4's address space is so small I can trivially scan any internal network, and there are a ton of ways to gather that data covertly from behind the firewall via maliciously crafted web pages or apps, abuse of any number of P2P apps or protocols (VoIP, video chat, WebRTC, etc.), and so on. IPv6 actually makes scanning harder since the address space is massive. E.g. if I have a /64 routed internally…

Mostly agree, but do want to clarify:

Obscurity is NOT security. But obscurity as one layer in a larger defense-in-depth setup IS helpful.

Do note that scanning IPv4 through a fishing page is still about a million times harder (literally) than targeting a known address.

And NAT is not security, but in some context is still helpful as one layer in a defense-in-depth setup - you can’t directly attack something that’s not routable.

Security is not binary; there are costs and there are benefits to various setups. My point was that the benefits provided by being able to provide an internal IPv6 address to an external entity are dwarfed by both Netsec and netadmin costs.

Also, if you can so easily scan my internal network with malicious web pages, you can probably passively listen for the v6 addresses. On the networks I managed, browsing happened through VNC to a browser on tightly controlled host that could only connect outside and only through a proxy. How do your fishing pages counter this?

Re: DigitalOcean VPC

#147
post #136

Earlier quoted context omitted.

How reliable do you find Hetzner servers to be?

Quite. I did have some issue with my server becoming unreachable every couple of weeks at the start of the year for a couple of times. Not sure if it was a fault that I caused or if there was some kind of a networking issue. I know I tinkered with the server a bit earlier, but it seems to have resolved itself without me really doing anything, so it could really be either way. One problem is also that apparently some…

Thank you

Re: DigitalOcean VPC

#148
post #33
post #17

Earlier quoted context omitted.

Yes. They also will automatically enable a private network interface for you if you use their Floating IP feature. This caught me by surprise when I found out the hard way :)

That suspiciously sounds like an anchor IP address and not an actual private network interface: https://www.digitalocean.com/docs/networking/floating-ips/

Ahh you are completely correct. It caused issues for me as it added a new interface that my firewalls knew nothing about.

Re: DigitalOcean VPC

#149

Earlier quoted context omitted.

Oracle cloud? The same technology that runs certain state unemployment systems and has been completely unable to scale, leaving hundreds of thousands of people with no income for the last five weeks? Oracle really should remove its logo from the footers of all those collapsing web sites. It's embarrassing.

That stack was most likely legacy middleware + database backend, a combination of fusion middleware, oracle database, CRM, etc. running on physical hardware or virtualized. Not automated, very basic HA, not easily scalable. Nothing to do with Oracle Cloud (although Oracle Cloud won't be on my list unless it's marginally cheaper than other cloud service providers). BTW: Talking about Oracle Cloud, my free tier trial e…

Yes, Most Gov systems are still not on cloud, OCI is way better and modern, cheaper than AWS (Disclaimer : I work at Oracle).

Re: DigitalOcean VPC

#150

Earlier quoted context omitted.

Do we know if the underlying cloud failed or if it was an application issue? I strongly suspect the latter especially when it comes to government projects.

Especially government projects that were contracted out to Oracle. :)

Proof?
Post reply on HN