Live data from Hacker News

Netlify just sent me a $104k bill for a simple static site

old.reddit.com

191–200 of 836 posts

Re: Netlify just sent me a $104k bill for a simple static site

#191
I deleted all my Vercel project, moved to Cloudflare, send this support message to Vercel:

Vercel seems like the perfect solution, and I love how it supports the development community.

I am moving all my current and future hobby projects away from Vercel due to concerns raised in this discussion. https://news.ycombinator.com/item?id=39520776

Although I am a very small customer of Vercel, I have been advising larger organizations on IT and data infrastructure for the last decade or so.

I can say with very high certainty that spending limits are a critical discussion point in every large organization when making IT decisions. I've observed multiple instances where a potentially better solution was not selected due to the risk of overspending.

Re: Netlify just sent me a $104k bill for a simple static site

#192

Here's my workaround for Vercel: - Enable spend management ( https://vercel.com/team_name/~/settings/billing ). - Set webhook to pause the project: https://vercel.com/docs/rest-api/endpoints/projects#pause-a-... When the amount hits the targeted value, Vercel will call the webhook that pauses the project.

Have you tested it end to end? When was the last time? I'm slightly worried about solutions like that. I like when it's all host's responsibility. (Having your own system on top is nice though)

Re: Netlify just sent me a $104k bill for a simple static site

#193
A few years ago I taught an introduction to website developmment module at a university where students built jekyll sites. I got them to to host on netlify. Now that I no longer teach at that uni and their email accounts will have expired I'm wondering if there's any way I can contact them to tell them to take their sites off netlify... Disaster if they get hit by charges like this.

Re: Netlify just sent me a $104k bill for a simple static site

#194

After doing some math it doesn't feel like a ddos: - $104k at ($55 / 100 GB) = 189 TB of traffic - It means the popular ~3.5 MB media file was downloaded ~54M times - Which sound like a lot, but if you get popular in a country with 1.4B people, it's not (~3% accessed). What if it happens at AWS Cloudfront? At $.1/GB it sums up to ~$18k. In the light of these, Netlify's offer of ~$5k seems generous.

The author claimed Netlify's own support agent said it was an L7 ddos and offered a 95% concession because it was a ddos.

There is no reason to question whether it was a ddos or not because, allegedly, both parties in this dispute already agree it was a ddos.

Re: Netlify just sent me a $104k bill for a simple static site

#195
post #168

Earlier quoted context omitted.

This might be a good time to point out Cloudflare Pages: https://pages.cloudflare.com/ Under the free tier: > Unlimited bandwidth

I'm moving everything to Cloudflare.

Just looking at pages.cloudflare.com now and I think I'm going to be using cloudflare from now on.

Re: Netlify just sent me a $104k bill for a simple static site

#196
If we take 60TB / 24 hours we get roughly 5.5Gbits/second of traffic.

You can get a 10gbps connection, per month, for under $4K a month to a datacenter. For full usage for one month, not one day. If buying at the scale of a much larger bandwidth user, the price is much less.

Re: Netlify just sent me a $104k bill for a simple static site

#199
post #25

Earlier quoted context omitted.

>Netlify and others are extremely transparent about the fact that there are no limits Are they also transparent about the fact that they 1. Won't do anything about a DDoS, and 2. In case there's a DDoS (or some other unusual traffic spike), you'll only get notified waaaaay after the fact when you get the $100K bill, instead of getting a timely alert that would allow you to shut your site down to prevent getting extre…

The primary purpose of these services is to be able to scale up and continue working under heavy load, shutting the site down when this occurs would defeat the entire purpose of the service. I would say that they are transparent about both of the things you have listed by virtue of being one of those scaling serverless hosting services.

How about letting the user decide whether they want to scale beyond a certain point or incur huge charges?

Not too mention: if the primary purpose of these services is to allow a DDoS and then charge the user for it — then, yup, you're guessing it right: it's a scam.

When their business model makes DDoS attacks profitable for them... They're not in the hosting business, they're in DDoS/extortion business.

Re: Netlify just sent me a $104k bill for a simple static site

#200
post #143

Earlier quoted context omitted.

For static sites my choice is usually CloudFlare in front of a S3 bucket. It costs pennies. With cloudflare R2 it might be even easier.

Why not just use Cloudflare Pages?

It wasn’t an option when I setup my S3+cloudflare sites. It sounds like an excellent solution now.
Post reply on HN