Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google Cloud Armor

cloud.google.com

Post reply on HN
Print view View original

21–30 of 54 posts

Re: Google Cloud Armor

#23

Post by kentonv »

victor106 wrote: post #6

This is great news. Cloudflare is way too expensive. Pricing seems reasonable Policy Charge $5 per Cloud Armor policy per month Per Rule Charge $1 per rule per policy per month Incoming Requests Charge $0.75 per million HTTP(S) requests

> Cloudflare is way too expensive.

Eh? DDoS protection on Cloudflare is free: https://blog.cloudflare.com/unmetered-mitigation/

Which features of Google Cloud Armor are "too expensive" with Cloudflare?

(Disclosure: I'm an engineer at Cloudflare, but I'm genuinely curious what you mean here.)

Re: Google Cloud Armor

#24

Post by killjoywashere »

villedepommes wrote: post #21
ivanfon wrote: post #5

Not a huge fan of Google getting more control over the net. On the bright side, Cloudflare getting a serious competitor is good.

Agreed. I just wish it wasn't Google. They "extinguished" a lot of good projects...

Meh, I think they've grown up some and see what Amazon has done. Building infrastructure services for customers adds long-term revenue. BMW doesn't make you buy fuel injectors from someone else.

Re: Google Cloud Armor

#27

Post by developer2 »

kentonv wrote: post #23
victor106 wrote: post #6

This is great news. Cloudflare is way too expensive. Pricing seems reasonable Policy Charge $5 per Cloud Armor policy per month Per Rule Charge $1 per rule per policy per month Incoming Requests Charge $0.75 per million HTTP(S) requests

> Cloudflare is way too expensive. Eh? DDoS protection on Cloudflare is free: https://blog.cloudflare.com/unmetered-mitigation/ Which features of Google Cloud Armor are "too expensive" with Cloudflare? (Disclosure: I'm an engineer at Cloudflare, but I'm genuinely curious what you mean here.)

Not comparing to Cloud Armor, but the $200/month minimum to bring one's own tls certificate. That alone puts Cloudflare squarely on the list of unusable options for any small project or business that is running their entire production infrastructure on less than $100/month. Also, the inability to specify cache expirations below... what was it... 30 minutes or 2 hours? Again, forced to pay too much for one of the core features of a CDN.

Re: Google Cloud Armor

#28

Post by manigandham »

xstartup wrote: post #25

Kubernetes doesn't support multi-region load balancing with GSLB yet.

How is that related to security policies?

Also you can't run a GKE cluster across multiple regions, only multiple zones. If you have multiple clusters in different regions, you can use a NodePort service on each and manually setup a GSLB with a backend pointing to all of the GKE clusters.

There is a solution being worked on though, called multi-cluster ingress: https://github.com/GoogleCloudPlatform/k8s-multicluster-ingr...

Re: Google Cloud Armor

#30

Post by zapita »

developer2 wrote: post #27
kentonv wrote: post #23

Earlier quoted context omitted.

> Cloudflare is way too expensive. Eh? DDoS protection on Cloudflare is free: https://blog.cloudflare.com/unmetered-mitigation/ Which features of Google Cloud Armor are "too expensive" with Cloudflare? (Disclosure: I'm an engineer at Cloudflare, but I'm genuinely curious what you mean here.)

Not comparing to Cloud Armor, but the $200/month minimum to bring one's own tls certificate. That alone puts Cloudflare squarely on the list of unusable options for any small project or business that is running their entire production infrastructure on less than $100/month. Also, the inability to specify cache expirations below... what was it... 30 minutes or 2 hours? Again, forced to pay too much for one of the core…

I never thought I'd see the day when $200/month is considered "way too much" for a CDN... We've really come a long way.

Personally I use Cloudflare's free tier for lots of projects, and it has a perfectly reasonable TLS offering.

Post reply on HN