Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netlify just sent me a $104k bill for a simple static site

old.reddit.com

Post reply on HN
Print view View original

271–280 of 836 posts

Re: Netlify just sent me a $104k bill for a simple static site

#271

Post by wielebny »

jart wrote: post #171
ji_zai wrote: post #74

This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…

Use a token bucket on your web server to catch abusive IPs and then blackhole them using `iptables -t raw -I PREROUTING -s ip -j DROP`. I know. I run https://ipv4.games/ which invites hackers to unleash their botnets, and the service runs on a small VM with only a few cores. It's been attacked by botnets with 49,131,669 IP addresses. There's no Cloudflare frontend or anything like that, because back when I used Cloud…

This strategy may work for a (D)DoS that is targeted to an application layer, but won't work if the attack is designed to exhaust your bandwidth.

Once you're receiving more traffic than you network cards can handle, it does not matter if you'll drop the packets with iptables or not.

I was the target of attacks that caused Hetzner to terminate my contract. I was leasing physical servers there, so I assume the attacks were overwhelming their infrastructure.

Re: Netlify just sent me a $104k bill for a simple static site

#272

Post by MrBuddyCasino »

sneak wrote: post #32
fbdab103 wrote: post #10

Woof. I was considering kicking the tires on Netlify, but they are officially out of consideration now.

There are lots of reasons to avoid Netlify. https://github.com/netlify/cli/issues/739

This seems like a lot of brouhaha about nothing. They just recorded the fact that a user opted out of telemetry, they didn't stealthily send telemetry against user wishes.

They removed this call in the meantime [0].

[0] https://github.com/netlify/cli/pull/740/files

Re: Netlify just sent me a $104k bill for a simple static site

#274

Post by signaru »

WyvernDrexx wrote: post #140
ji_zai wrote: post #74

This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…

Imagine you lost your job. So you are here enjoying creating and hosting your hobby projects in theses services. Now, suddenly one fine morning you get slapped with $104K bill because someone decided to randomly ddos your one page dog lover website. Now, who in the would would be thinking of having ddos protection for their hobby project? This is just absurd thinking.

Can't hosts just make a site unavailable once it reaches its plan's bandwidth limit, DDoS or not?

I think being offline is a lesser headache than a large bill, especially for those who are inclined to a free tier to begin with.

Re: Netlify just sent me a $104k bill for a simple static site

#275

Post by trog »

pushedx wrote: post #238
hiAndrewQuinn wrote: post #119

This happened to me on a much smaller scale about a year back. I was never happier to have stuck to my guns, building my whole site with a single `hugo` command - it made it very easy to migrate off that platform for good. If anyone has a solid bash one liner to stress test a website, so that I can test whether my cloud billing cap will work correctly if I accidentally try to egress 100 MB of data or something, I wou…

apachebench (cli command ab), is an Apache licensed stress testing utility, not much relation to the web server, which can be easily used to stress test a webserver. the binary should be easy to install with your package manager, you may have it installed already example: ab http://something.com

Vegeta worth a look if you want something a bit more sophisticated: https://github.com/tsenart/vegeta

Re: Netlify just sent me a $104k bill for a simple static site

#276

Post by PUSH_AX »

dhaavi wrote: post #7

> And since my amount is too large, they offer to discount to 5%, which means I still need to pay 5 thousand dollars. If they just reduce to 5% like that, it shows how disconnected this is from their real bandwidth cost. Really does feel like a scam.

Some quick back of napkin math says 190TB would cost about $12k in AWS cloudfront costs.

Re: Netlify just sent me a $104k bill for a simple static site

#277

Post by juandemarco »

stanac wrote: post #173

I just checked pricing on hetzner (not affiliated with them). First 20 TB are included with VM price, after which it's 1.19 euros per TB. If this happened to someone hosting there it would cost them additional 50 euros. Can't believe the difference in traffic pricing. Netlify is over 1000x more expensive per TB.

Hetzner doesn't bill incoming or internal traffic [0], only outgoing, so in OP's case he would not have had this problem.

[0] https://docs.hetzner.com/cloud/billing/faq/#how-do-you-bill-...

Re: Netlify just sent me a $104k bill for a simple static site

#278

Post by rajamaka »

arthur_sav wrote: post #216
carlmr wrote: post #100

Earlier quoted context omitted.

I guess we need regulation for this.

We don't need regulation for everything. Let customers vote with their wallet or even start a few lawsuits. Adding more regulation makes the system slower.

Regulation is needed for lawsuits

Re: Netlify just sent me a $104k bill for a simple static site

#279

Post by trog »

debok wrote: post #58
lopkeny12ko wrote: post #26

Earlier quoted context omitted.

For less than 1% of OP's monthly bill, you can build or obtain a more-than-enough server, drop your static files on it, and serve through nginx. And you get to keep it forever; there's no monthly subscription fee! Seriously, maybe I'm just old, but I look at the pricing of these hip and modern SaaS products for dead simple software and I cannot believe my eyes. The "old fashioned way" works just fine (and has always…

Having built serverless apps and "old-fashioned" apps, I seriously believe the old fashioned way is better. The best of both worlds is to host on AWS EC2 or a similar product from your web service provider of choice.

EC2 is so much more expensive than a standard VPS from almost any other provider though. If you're not embedded heavily in other AWS products I don't think it's worth bothering with EC2 - LightSail is way more cost effective and gets you most of the features.
Post reply on HN