Live data from Hacker News

AWS Shield – Managed DDoS Protection

aws.amazon.com

51–60 of 79 posts

Re: AWS Shield – Managed DDoS Protection

#51
If you are willing to pay $thousands per month for DDOS protection, do yourself a favor and talk to DOSArrest. They have been specializing in DDOS protection since 2007, always answer tickets in minutes, and are aggressively committed to beating DDOS attacks. Not sure of their current pricing but I think it is in this range or lower.

Re: AWS Shield – Managed DDoS Protection

#52
post #25

I have a lot of questions/problems with this. Here are two. 1.) They mention in the compare tiers "Application traffic monitoring" for Advanced. However in the FAQ: "In addition, customers can also use AWS WAF to protect against Application layer attacks". WAF is only available through CloudFront, and CloudFront charges 600 dollars a month for a custom SSL certificate with dedicated IP. So do they have "Application t…

for $3k/month i wouldn't expect a competent human being to be on call 24/7, which is what you're asking for. this is one thing that does not enjoy economies of scale. competent people working under pressure at 3AM on a holiday are extremely expensive. would _ you _ do that job? and how much do you get paid?

Rackspace and DosArrest are two companies that currently provide me with competent support 24/7 for products that cost less than $3k/month.

They're out there, you just have to look.

Re: AWS Shield – Managed DDoS Protection

#53
post #28
post #17

Earlier quoted context omitted.

You appear to be assuming that the credit applies after they charge your card, which is not what it reads as to me. The process sounds like "$1k line item for traffic -> $1k credit -> $0 charged to card". Additionally: you can totally set up CloudWatch Alarms for billing events, it's one of the categories they provide out-of-the-box, and alarms can trigger notifications, lambdas, SQS, etc. So you can totally wire ala…

Right, I see how I could have been wrong about that assumption. I assumed it would be after-the-fact credits. And doing it through Lambda is possible, but the friction there almost feels deliberate. They should make it a first-class option you don't need to wire together yourself.

They should make it a first class option - to spend less money with them?

AWS is the ultimate "wire it together yourself" tool. If that's _not_ what you're after, there are many other vendors eager to take your money.

Re: AWS Shield – Managed DDoS Protection

#54
A lot of people are missing the point. AWS has the ability to handle the largest attacks like the one that took out dns for half the net. Its not meant to be compared with the smaller players with limited abilities such as dosarrest and what not.

If you are on AWS, you are already protected up to a certain size for free. This you can compare to a dosarrest, small 10,20,30 gbps attacks and yet you are getting it for free, at no cost! The advance opens you up to a team of actual ddos experts 24/7, this is meant for the serious players that cant afford interuptions or downtime.

If your worried about blogs and wiki stuff, use google's ddos shield which is free for bloggers and news outfits.

This is a huge deal people, i cant understand why there are people out here bashing it, what a joke.

Re: AWS Shield – Managed DDoS Protection

#55
post #26

Earlier quoted context omitted.

They did just re-organize that dropdown in AWS, it's actually much easier to search and find things. You can also pin commonly-used services to the top menu bar too.

For someone familiar with the products, yes. But for someone new to AWS most of these options don't make sense. I'm looking at a menu with hundreds of options like Snowglobe and Beanstalk and I have no idea where to start. Are they trying to brand their trademarks as the defacto name for the service (like Kleenex and ChapStick have done)?

Oh, all of AWS is terribly not-intuitive to use. Just creating an EC2 instance is amazingly complicated.

Re: AWS Shield – Managed DDoS Protection

#56

Earlier quoted context omitted.

Why? It isn't dedicated support. A single support rep could have hundreds of theoretical clients. Amazon.com manages to have 24/7 chat support and they certainly aren't charging $3K/month. That's just the power of multi-tasking.

sounds like you've stumbled onto a fantastic entrepreneurial business opportunity. i say you should go for it!

I think you're being rather uncharitable to the GP. Essentially no host, managed or unmanaged, has a 1 engineer:1 customer ratio.

Most of the big names in DDoS protection, looking only at enterprise tier support, have tens of clients per network support tech minimum.

Re: AWS Shield – Managed DDoS Protection

#57

Earlier quoted context omitted.

Why? It isn't dedicated support. A single support rep could have hundreds of theoretical clients. Amazon.com manages to have 24/7 chat support and they certainly aren't charging $3K/month. That's just the power of multi-tasking.

sounds like you've stumbled onto a fantastic entrepreneurial business opportunity. i say you should go for it!

What, clone aws and offer better support?

I feel like you're trying to mock him for being so self evidently wrong that it's (apparently) funny, but I don't see it. How does criticism of a support model lead to "then you do it"?

Or are you implying something else? That's what I hate about these coy between-the-lines replies in chat forums. It's not obvious and I don't know what to reply to! Just say what's on your mind, don't play games. Give the rest of us a chance to reply to something.

/rant, sorry :)

Re: AWS Shield – Managed DDoS Protection

#58
post #25

I have a lot of questions/problems with this. Here are two. 1.) They mention in the compare tiers "Application traffic monitoring" for Advanced. However in the FAQ: "In addition, customers can also use AWS WAF to protect against Application layer attacks". WAF is only available through CloudFront, and CloudFront charges 600 dollars a month for a custom SSL certificate with dedicated IP. So do they have "Application t…

24/7 Business support starts at $100/month and includes phone support.

We have Enterprise level support which starts at $15,000/month and is very comprehensive. Then again we also have 90k employees.

https://console.aws.amazon.com/support/plans/home?region=us-...

Re: AWS Shield – Managed DDoS Protection

#59
post #29

Earlier quoted context omitted.

As per the pricing page, looks like you _do_ need support plan: "AWS Shield Advanced is available to customers who are enrolled in either the Enterprise or Business Support levels of AWS Premium Support." https://aws.amazon.com/shield/pricing/

Oh wow, thanks! I hadn't noticed that yet :| So many caveats to this thing. Look like I'd need to pony up >1k/mo on top of 3k to get access to the service then...

See above, business level support 24/7 with phones is $100/month.

Re: AWS Shield – Managed DDoS Protection

#60
post #53
post #28

Earlier quoted context omitted.

Right, I see how I could have been wrong about that assumption. I assumed it would be after-the-fact credits. And doing it through Lambda is possible, but the friction there almost feels deliberate. They should make it a first-class option you don't need to wire together yourself.

They should make it a first class option - to spend less money with them? AWS is the ultimate "wire it together yourself" tool. If that's _not_ what you're after, there are many other vendors eager to take your money.

This is really just apologizing for bad UX. Bad UX in the best case, dark pattern in the worst case.
Post reply on HN