Wow.
I can't read it because I block reddit, but I assume it's a DDOS? With a bill that large, it would actually make business sense for them to team up with DDOSers.
Netlify just sent me a $104k bill for a simple static site
251–260 of 836 posts
Re: Netlify just sent me a $104k bill for a simple static site
#252Earlier quoted context omitted.
I'm moving everything to Cloudflare.
I'm trying to sign up but it keeps saying "Verification is taking longer than expected. Check your Internet connection and refresh the page if the issue persists." Does anyone else experience this as well?
That's the Cloudflare user experience in a nutshell. Your users will see the same thing when they visit your Cloudflare-hosted site.
Re: Netlify just sent me a $104k bill for a simple static site
#253Earlier quoted context omitted.
Why do we need regulation? "Keep the service up no matter what happens, no matter the cost" is a useful business model for companies that make the mistake of promising too many nines to their customers. The issue at hand is that people put small websites on hosting providers designed for megacorporation wealth, like Netlify. I highly doubt the average blog needs more than a $10 VPS located in one single country witho…
> "Keep the service up no matter what happens, no matter the cost" is a useful business model I mean, yeah - but that shouldn't be the default and it shouldn't be something that you can't opt out of if it is, which is what sounds like happened with Netlify.
Why would Netlify offer the option to opt out when extreme availability is their core business? I'd argue that people are using the wrong service provider if they need to opt out in the first place.
Same goes for most of the other pay-as-you-go providers that turn HN into billing support every now and then; very rarely do I see "we suddenly got a $20k bill" posts about services that these extreme availability products make sense for.
Re: Netlify just sent me a $104k bill for a simple static site
#254Earlier quoted context omitted.
That’s a free tier that doesn’t sound sustainable then, so that raises alarm bells to me.
That's because amazon and big telecom convinced you that bandwidth is expensive. It isn't. Once the equipment is there, you might as well use it.
Wouldn't there be at least a handful of competitors if the economics worked out that way?
Re: Netlify just sent me a $104k bill for a simple static site
#255Earlier quoted context omitted.
Especially since they admit it was a DDoS attack. What I find outrageous is first that they charge for incomming traffic (which is often free with other providers), but also 55$ per 100GB. For comparisson, Hetzner charges you 1€ per 1TB of outgoing traffic while incoming is free.
If the attacker downloaded the 3,44mb audio file that OP mentioned, aren't we talking about outgoing traffic?
Even so, on Hetzner it would have cost them a total of $164, with no discount.
On Netlify it's over 500 times higher, apparently.
Re: Netlify just sent me a $104k bill for a simple static site
#256The lesson to be learned is to pay attention to pricing before signing up, and don't buy really expensive services. Assuming a gigabit connection, you have the potential to pay $13000 per day.
Re: Netlify just sent me a $104k bill for a simple static site
#257This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…
Wait until you learn that Vercel only supports blocking IP CIDR ranges on the Enterprise plan.
Re: Netlify just sent me a $104k bill for a simple static site
#258This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…
> Cloudflare's ddos protection Yeah, we got hammered once with over 10TB/mo and noped out of Netlify as fast as we could: https://twitter.com/rethinkdns/status/1370342245841342466 Had to pay the bill in full. Cloudflare's free tier is ridiculous: We do over 30TB+ of genuine traffic for $0. Makes it hard to move to any other platform. As a small tech shop, this is my Hotel California I'm happy to never leave.
CloudFlare pricing is indeed positively ridiculous.
At OpenTofu[0] we’re using CloudFlare R2 to host the providers and modules registry[1]. Bandwidth is free, you only pay for requests.
This already would be great, but there’s more - you only pay for requests that actually hit R2. So with an almost 100% cache hit ratio, we barely register any billable requests.
Recently someone decided to load test us and generated ~1TB of traffic over 1-3 days. All but a few of these requests were cached, so the whole situation probably cost us less than a cent.
[0]: https://opentofu.org
Re: Netlify just sent me a $104k bill for a simple static site
#259This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…
Those services exist, and you have the option to use them. Netlify is not one. Apparently, you chose that the un-insured solution was best for you.
Re: Netlify just sent me a $104k bill for a simple static site
#260Just to toss this out there: There are too many services that don't really let you cap your spend. AWS, for example: You can set alarms, but as far as I know, you cannot sent a spend limit.
I had a couple of small businesses hosted there, but this always worried me, so I moved them to a local provider, who provides what they need for a flat fee.