Cloudflare has free DDOS protection.
Additionally, they own ( or co-own) their DC, while Netlify and Vercel doesn't. So they can fix any billing issues at their end.
Netlify just sent me a $104k bill for a simple static site
51–60 of 836 posts
Re: Netlify just sent me a $104k bill for a simple static site
#52A lot of today's managed service solutions turn scaling problems into billing problems. While that's a useful tradeoff for many business use-cases, there should still be a way to set limits so you don't wind up with insane cost overruns.
Re: Netlify just sent me a $104k bill for a simple static site
#53I don't see why people are surprised by this or why people are calling it a scam. Netlify and others are extremely transparent about the fact that there are no limits. I completely understand not liking it and can see why the lack of limits would make it a bad option for plenty of people, but I don't see how it can possibly be called a scam.
My previous understanding was that service would be stopped once you hit past the free tier. Upon review, it does not look like this is the case. I have several very low traffic projects on which would have never been anywhere close to the free limit. However, if I get involved in a random spam attack, it seems I could be on the hook for several thousand dollars. This is incredibly dangerous. Netlify is often used as…
It does say it's pay-as-you-go on their pricing page. However they probably should have a giant warning page for new users who don't know that this is how this kind of service works if they want to target the beginner web-dev market. As far as I know, no other similar service has this though.
Re: Netlify just sent me a $104k bill for a simple static site
#54The most bizarre thing is that this is a known issue that folks have asked them for ways to mitigate, to no avail. The reddit thread even links to an extremely weird dialogue where Netlify's response boils down to, "if you're hosting a small site that gets DDoS'd, don't." https://answers.netlify.com/t/limit-bandwidth-to-avoid-high-...
https://www.netlify.com/security/ sez “Active DDoS mitigation — Netlify monitors for traffic pattern anomalies and spikes, and effectively controls for them as needed” and now I'm curious about what that actually means.
Re: Netlify just sent me a $104k bill for a simple static site
#55So if I want to migrate off of netlify to something better, where?
Github static page.
Re: Netlify just sent me a $104k bill for a simple static site
#56[deleted]
Re: Netlify just sent me a $104k bill for a simple static site
#57I don't see why people are surprised by this or why people are calling it a scam. Netlify and others are extremely transparent about the fact that there are no limits. I completely understand not liking it and can see why the lack of limits would make it a bad option for plenty of people, but I don't see how it can possibly be called a scam.
Because it's unbounded liability.
Not to mention the strong conflict of interest for netlify, who stands to gain from their customers being attacked. Netlify is getting paid for something criminal in nature having occurred.
It's like who is responsible for credit card fraud? If customers are responsible for credit card fraud, and it's their responsibility not to get scammed, then who implements fraud prevention measures and what effect would that have on the volume of fraud?
Re: Netlify just sent me a $104k bill for a simple static site
#58So if I want to migrate off of netlify to something better, where?
For less than 1% of OP's monthly bill, you can build or obtain a more-than-enough server, drop your static files on it, and serve through nginx. And you get to keep it forever; there's no monthly subscription fee! Seriously, maybe I'm just old, but I look at the pricing of these hip and modern SaaS products for dead simple software and I cannot believe my eyes. The "old fashioned way" works just fine (and has always…
Having built serverless apps and "old-fashioned" apps, I seriously believe the old fashioned way is better.
The best of both worlds is to host on AWS EC2 or a similar product from your web service provider of choice.
Re: Netlify just sent me a $104k bill for a simple static site
#59Woof. I was considering kicking the tires on Netlify, but they are officially out of consideration now.
There are lots of reasons to avoid Netlify. https://github.com/netlify/cli/issues/739
That sounds like a company that is happy to ignore customer pain. Agree, default-on telemetry that cannot fully be disabled is a red flag that on their side, the people with development experience have no say.
Re: Netlify just sent me a $104k bill for a simple static site
#60> And since my amount is too large, they offer to discount to 5%, which means I still need to pay 5 thousand dollars. If they just reduce to 5% like that, it shows how disconnected this is from their real bandwidth cost. Really does feel like a scam.
Especially since they admit it was a DDoS attack. What I find outrageous is first that they charge for incomming traffic (which is often free with other providers), but also 55$ per 100GB. For comparisson, Hetzner charges you 1€ per 1TB of outgoing traffic while incoming is free.