I once got a $65,000 water bill from the city for one month. I laughed and called them and asked them to re-read the meter and correct it, and expected a quick resolution. But no, they insisted it was correct for some time and that I needed to pay it. They said I probably had a leaky faucet or running toilet. There was no awareness on the part of the customer service people how ridiculous that was. It would be physic…
Netlify just sent me a $104k bill for a simple static site
541–550 of 836 posts
Re: Netlify just sent me a $104k bill for a simple static site
#542Earlier quoted context omitted.
How does a 60 TB in a day peak for a site that previously never crossed the free tier threshhold not qualify as "attack pattern"? This is a static site. To reach that sort of bandwidth out of nowhere you'd need to publish the blueprint for a teleportation machine
To be fair, these days, things can become viral literally overnight. That said, instead of depending on unreliable heuristics, they should just allow an option to change the behavior. The "current policy" to charge small sites on the free tier thousands of dollars instead of just throttling/shutting down the traffic is really predatory.
Re: Netlify just sent me a $104k bill for a simple static site
#543Earlier quoted context omitted.
I'm not sure that's true. Shutting down unneeded hardware seems like a very simple but major optimization.
You assume that the hardware would be unneeded, but that's a very strong assumption. It would be very bad for any cloud provider to leave hosts with only one VM running on it, and you can be pretty sure only very small minority of their park that end up in that situation where shutting down a single VM would lead to a shut-down of the entire host, because it means that the host was vastly under-used in the first plac…
At least in AWS, they never supported this, and in fact may require you to reboot an instance occasionally in order for it to be moved to a new hardware host (typically when they are upgrading their hardware).
Re: Netlify just sent me a $104k bill for a simple static site
#544Earlier quoted context omitted.
1. Yes. We've forgiven lots and lots of bills over the last 9 years and they haven't gone viral 2. While I've always favored erring towards keeping people's sites up we are currently working on changing the default behavior to never let free sites incur overages
> 1. Yes. We've forgiven lots and lots of bills over the last 9 years and they haven't gone viral Sequence of events doesn't support this answer: 1. User gets charged 100k 2. User complains to support 3. User receives discount to 20k, then 5k. Support states policy is normally 20k 4. User discloses to the world. Goes viral. 5. Invoice is forgiven While you might forgive "lots and lots", fact is that you still present…
I'm a paranoid person by nature so "It's free... just... give us your card details" is always suspicious.
Re: Netlify just sent me a $104k bill for a simple static site
#545Netlify CEO here. Our support team has reached out to the user from the thread to let them know they're not getting charged for this. It's currently our policy to not shut down free sites during traffic spikes that doesn't match attack patterns, but instead forgiving any bills from legitimate mistakes after the fact. Apologies that this didn't come through in the initial support reply.
Re: Netlify just sent me a $104k bill for a simple static site
#546Earlier quoted context omitted.
Every Netlify project is assigned a Netlify subdomain (i.e. `example.netlify.app`) that cannot be removed or proxied. If anyone figures out what your Netlify subdomain is, it's my understanding that they can DDoS you and there's nothing you can do about it.
That makes sense, but is the Netlify subdomain visible from your custom domain? How would they be able to figure it out, other than humans leaking it somehow?
It's a design limitation of Netlify that might cost you $100,000 some day.
Re: Netlify just sent me a $104k bill for a simple static site
#547This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…
> Cloudflare's ddos protection Yeah, we got hammered once with over 10TB/mo and noped out of Netlify as fast as we could: https://twitter.com/rethinkdns/status/1370342245841342466 Had to pay the bill in full. Cloudflare's free tier is ridiculous: We do over 30TB+ of genuine traffic for $0. Makes it hard to move to any other platform. As a small tech shop, this is my Hotel California I'm happy to never leave.
Yeah that's how Cloudflare can reach total control over the Internet. With thunderous applause by people that should know better.
I know that my position is outright blasphemous in this day and age, where even self-hosting a static site has become black magic and we need a third party to do it for us.
Re: Netlify just sent me a $104k bill for a simple static site
#548Netlify CEO here. Our support team has reached out to the user from the thread to let them know they're not getting charged for this. It's currently our policy to not shut down free sites during traffic spikes that doesn't match attack patterns, but instead forgiving any bills from legitimate mistakes after the fact. Apologies that this didn't come through in the initial support reply.
Re: Netlify just sent me a $104k bill for a simple static site
#549Earlier quoted context omitted.
1. Yes. We've forgiven lots and lots of bills over the last 9 years and they haven't gone viral 2. While I've always favored erring towards keeping people's sites up we are currently working on changing the default behavior to never let free sites incur overages
Any cloud platform should have a spend-stop amount built in. i.e. if I know I average $10 a day, I should be able to put in a "If it hits $50, email me and take it offline". Of course the opposite problem is then people setting that limit too low but since the user defines the limit that's on them not you. This is one of the reasons I still in 2024 rent physical boxes and run the modern stuff on top of them directly,…
I still prefer this too. Kinda funny how server resource limitations became a feature and not a bug when it was one of the problems the cloud sought to overcome
Re: Netlify just sent me a $104k bill for a simple static site
#550There's no way in hell anyone should ever under any circumstance use a free service that might, for reasons entirely outside your control, suddenly bill you 5k, or 104k... or any non trivial amount really. Just suspend service on excessive overages...