Live data from Hacker News

Linode launches free DDoS protection

linode.com

21–30 of 182 posts

Re: Linode launches free DDoS protection

#21
post #7

Earlier quoted context omitted.

AWS has strong DOS protection and just doesn’t tend to shout about it. Putting services behind AWS for some basically free protection has been a trick against basic volumetric attacks for a while.

So how does that actually work? Doesn't AWS charge an arm and a leg for traffic?

Basic volumetric - which is what the smaller providers can't handle, AWS can eat easily.

I don't believe I've been charged for this type of attack. The one you should look out for if you are new to AWS and trying to do this "trick" is L7 repeated downloads of high-file-size content to consume your budget rapidly.

Re: Linode launches free DDoS protection

#22
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

I've used Linode in the past but most of my non-GCP workload is in Digital Ocean now. It's just simply cost. I have some one-off services that run async and need RAM. It's much cheaper on DO.

I keep everything directly user-facing (ie, must-be-always-available) on GAE. Which is expensive, but nobody has to wear a pager.

Re: Linode launches free DDoS protection

#23
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

You start using GCP/AWS/Azure, you're going to start using managed databases, security groups, etc. These are really nice. They can save you a lot of time as a startup. ... They are incredibly difficult to migrate. If you use terraform, it does support GCP/AWS/Azure/DO/Vultr, but you'll have to rewrite everything for each provider.

For really simple providers (just a VM; in AWS, just EC2) you can still write all your own Ansible/Puppet/Chef (I recommend Ansible) to setup your servers for you. You can do your own databases, but there is complexity in scaling, multi-read only workers, etc. Managed solutions are nice in how they handle that for you and you really only need to do off-site backups. But the advantage is, once you have it all written and figured out ... you can move it anywhere.

As a startup, you want to get everything fast. So you're going to get locked in (most likely). That's fine if you start making money. If you want to start cutting costs later, it's not really going to matter who you originally started with. You're going to be rewriting a lot.

There are a TON of tradeoffs going in either direction. Linode/Vultr/DO really appeal to people self-hosting or startups that have infrastructure people from day one who can stand up things, platform-independent, from day one.

DO has started offering managed databases and load balancers. Now we see Linode offering DDOS (maybe saving you money from paying CloudFlare)? Everyone wants to get to the point where they can at least offer the minimum AWS/GCP/Azure stack (web + DNS + load balance + firewall + database .. maybe throw in some managed k8s like DO is doing now?)

It's really all about tradeoffs. What time do you want to put in now so it's easier to migrate later?

Re: Linode launches free DDoS protection

#24
post #4

Does AWS or any other large cloud provider offer this type of service?

All of them have both automatic and add-on DDoS protection, for example of branded offerings (which doesn't cover all of the built-in protection):

GCP: https://cloud.google.com/armor/

AWS: https://aws.amazon.com/shield/

Re: Linode launches free DDoS protection

#25
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

Cost and ease of development by not throwing thousand of options in front of your screen.

Last time, I checked GCP costed me $26 (+ hidden charges) for the same I could get on many other places for $7. Some of them provide instant customer support too and are better because it's not an outsourced customer center in India or other places.

Check out:

vultr: https://www.vultr.com

Scaleway: https://www.scaleway.com/en/

OVH: https://www.ovhcloud.com/en/

DO: https://www.digitalocean.com

Some prefer managed infrastructure and want to write code. Though, you can do that via GKM but prefer more straightforward approach.

Nanobox: https://nanobox.io

Heroku: https://www.heroku.com

LastBackend: https://lastbackend.com

ML/AI

Paperspace: https://www.paperspace.com

Flyodhub: https://www.floydhub.com

Colocation for those who have big infrastructure needs and developers will cost them less.

Equinx: https://www.equinix.com

Datafoundry: https://www.datafoundry.com

Disclaimer: not associated with any of them. Have used some of them and for others, heard great things.

You can easily go lower for less support and most likely a shit interface with some reliability issues.

Re: Linode launches free DDoS protection

#26
post #16
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

Cost and ease of onboarding. For $5/mo you get 1 vCPU, 1GB RAM, 25GB SSD, 1TB egress quota. Try calculating the egress cost alone for GCP or AWS.

Amazon LightSail gives you 1 CPU, 1GB RAM, 40GB SSD and 2TB transfer for the same price.

Re: Linode launches free DDoS protection

#27
post #7

Earlier quoted context omitted.

AWS has strong DOS protection and just doesn’t tend to shout about it. Putting services behind AWS for some basically free protection has been a trick against basic volumetric attacks for a while.

So how does that actually work? Doesn't AWS charge an arm and a leg for traffic?

AWS charges an arm and a leg for outbound traffic, inbound traffic is free. Volumetric attacks are all about overwhelming your inbound; if AWS will swallow that at their ACL layer for you, that's seems pretty useful, and shouldn't generate billing.

Re: Linode launches free DDoS protection

#28
post #2

I guess this is basically the same as OVH's "VAC" system? I sometimes get these emails: >We have just detected an attack on IP address x.x.x.x. In order to protect your infrastructure, we vacuumed up your traffic onto our mitigation infrastructure. The entire attack will thus be filtered by our infrastructure, and only legitimate traffic will reach your servers. and then: >We are no longer able to detect any attack o…

Hacker: ping -t 1.2.3.4

OVH: go into lockdown!

Re: Linode launches free DDoS protection

#29
post #27

Earlier quoted context omitted.

So how does that actually work? Doesn't AWS charge an arm and a leg for traffic?

AWS charges an arm and a leg for outbound traffic, inbound traffic is free. Volumetric attacks are all about overwhelming your inbound; if AWS will swallow that at their ACL layer for you, that's seems pretty useful, and shouldn't generate billing.

OTOH, it's tricky to direct your inbound to AWS without involving them in your outbound...

Re: Linode launches free DDoS protection

#30
post #27

Earlier quoted context omitted.

AWS charges an arm and a leg for outbound traffic, inbound traffic is free. Volumetric attacks are all about overwhelming your inbound; if AWS will swallow that at their ACL layer for you, that's seems pretty useful, and shouldn't generate billing.

OTOH, it's tricky to direct your inbound to AWS without involving them in your outbound...

In terms of running a data lake or keeping stuff for a long time, it's great, but of course they're banking on you moving a bunch of data to AWS to either train ML off of (compute costs) or keep it there and rack up storage space charges.
Post reply on HN