Netlify just sent me a $104k bill for a simple static site

Post by zrn900 » Tue, Feb 27, 2024, 4:40 PM UTC

jug wrote: post #425

valine wrote: post #349

Earlier quoted context omitted.

I’ve been a netlify user since 2017 and I just deleted all my sites. I can’t risk receiving a $100k bill for toy projects. Your “current policy” is not good enough.

I agree and also delete my account. The only "fix" here is to act like Hetzner and null route upon DDoS, price cap the thing, or offer unlimited bandwidth on the free tier like e.g. Cloudflare Pages. Uncapped but paid is a recipe for disaster and you'll always be subject to the will of the support staff when something happens. If they can grasp to a straw leading to suspicions that it's not in fact a DDoS attack, you…

Post by bravetraveler » Tue, Feb 27, 2024, 4:44 PM UTC

whatshisface wrote: post #254

DontBreakAlex wrote: post #233

Earlier quoted context omitted.

That's because amazon and big telecom convinced you that bandwidth is expensive. It isn't. Once the equipment is there, you might as well use it.

Wouldn't there be at least a handful of competitors if the economics worked out that way?

Post by bravetraveler » Tue, Feb 27, 2024, 4:48 PM UTC

jart wrote: post #171

ji_zai wrote: post #74

This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…

Use a token bucket on your web server to catch abusive IPs and then blackhole them using `iptables -t raw -I PREROUTING -s ip -j DROP`. I know. I run https://ipv4.games/ which invites hackers to unleash their botnets, and the service runs on a small VM with only a few cores. It's been attacked by botnets with 49,131,669 IP addresses. There's no Cloudflare frontend or anything like that, because back when I used Cloud…

Post by nazka » Tue, Feb 27, 2024, 4:56 PM UTC

kej wrote: post #555

noir_lord wrote: post #378

Earlier quoted context omitted.

Any cloud platform should have a spend-stop amount built in. i.e. if I know I average $10 a day, I should be able to put in a "If it hits $50, email me and take it offline". Of course the opposite problem is then people setting that limit too low but since the user defines the limit that's on them not you. This is one of the reasons I still in 2024 rent physical boxes and run the modern stuff on top of them directly,…

This is something I really like about Nearly Free Speech.net. Their model is that you deposit funds up front, and they will deduct from those funds as you use services. It helps that they actually are nearly free so that a single $20 deposit can last for months or years in many cases. It's bizarre to me that more services don't support billing this way, since there are tons of situations where I would much rather hav…

Post by spacecadet » Tue, Feb 27, 2024, 4:57 PM UTC

bobfunk wrote: post #317

Netlify CEO here. Our support team has reached out to the user from the thread to let them know they're not getting charged for this. It's currently our policy to not shut down free sites during traffic spikes that doesn't match attack patterns, but instead forgiving any bills from legitimate mistakes after the fact. Apologies that this didn't come through in the initial support reply.