Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netlify just sent me a $104k bill for a simple static site

old.reddit.com

Post reply on HN
Print view View original

821–830 of 836 posts

Re: Netlify just sent me a $104k bill for a simple static site

#821

Post by ponector »

charles_f wrote: post #531
bobfunk wrote: post #351

Earlier quoted context omitted.

1. Yes. We've forgiven lots and lots of bills over the last 9 years and they haven't gone viral 2. While I've always favored erring towards keeping people's sites up we are currently working on changing the default behavior to never let free sites incur overages

> 1. Yes. We've forgiven lots and lots of bills over the last 9 years and they haven't gone viral Sequence of events doesn't support this answer: 1. User gets charged 100k 2. User complains to support 3. User receives discount to 20k, then 5k. Support states policy is normally 20k 4. User discloses to the world. Goes viral. 5. Invoice is forgiven While you might forgive "lots and lots", fact is that you still present…

They had forgiven lots and lots of bills, but forced to pay lots and lots more people.

Re: Netlify just sent me a $104k bill for a simple static site

#822

Post by bradly »

themoonisachees wrote: post #813
bradly wrote: post #753

Earlier quoted context omitted.

How much to add a watch to the plan?

Why would one ever want to add a watch to a phone bill? ISPs are notoriously fleecing their costumers on every front, why would you ever go to them to get a loan?

It isn't a loan. It is cell service for a Watch.

Re: Netlify just sent me a $104k bill for a simple static site

#823

Post by leerob »

foxandmouse wrote: post #763

If Netlify and Vercel don't offer ddos protection, or at least a spend limit.. any other recommendations for next/ react hosting?

(I work at Vercel) We do have DDoS protection, and spend limits. We're imminently launching improvements to both of these as well Importantly, OP was on a free tier on Netlify which does allow you to pay for additional usage on demand. Vercel's free tier does not – if you are on a hobby plan and you go over the included usage, your site will be paused automatically.

1: https://vercel.com/blog/introducing-spend-management-realtim...

Re: Netlify just sent me a $104k bill for a simple static site

#825

Post by aperture147 »

Lammy wrote: post #91
PaoloBarbolini wrote: post #63

Earlier quoted context omitted.

It means they protect themselves from layer 3 and 4 DDoS. For layer 7 you're mostly on your own. That's what most companies mean when they talk about DDoS anyway.

I found https://www.netlify.com/blog/2017/03/28/why-you-dont-need-cl... and it sounds like you're right. “The cool thing is that we also provide a load balancer, and if our system has detected that our main load balancer is currently being hit by a large DDoS attack and is slow or unresponsive, we’ll simply route around that on the DNS level. Since we cache content at our edge nodes around the world, end users also e…

Well at least Cloudflare will not charge me for this situation.

Re: Netlify just sent me a $104k bill for a simple static site

#826

Post by aperture147 »

ignoramous wrote: post #129
ji_zai wrote: post #74

This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere. Just went through Vercel's docs: --- "Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically miti…

> Cloudflare's ddos protection Yeah, we got hammered once with over 10TB/mo and noped out of Netlify as fast as we could: https://twitter.com/rethinkdns/status/1370342245841342466 Had to pay the bill in full. Cloudflare's free tier is ridiculous: We do over 30TB+ of genuine traffic for $0. Makes it hard to move to any other platform. As a small tech shop, this is my Hotel California I'm happy to never leave.

I know that putting all eggs on one basket and giving it all to Cloudflare is not a good idea, if they have an outtage then I would also have it to. But when they are down, one third of the internet is down with them too. With 240$ a year for CDN, 60$ a year for serverless and $0.015 / GB-month for S3-compatible storage with free egress, I don't think anyone could find a better alternative than CF. I'm mixing with AWS, CF and self-hosted machines and the infra cost is less than 5k$ a year. Now I can spend the remain hard earned money for some fresh marlboro cigarettes.

Re: Netlify just sent me a $104k bill for a simple static site

#827

Post by homerjam »

bobfunk wrote: post #317

Netlify CEO here. Our support team has reached out to the user from the thread to let them know they're not getting charged for this. It's currently our policy to not shut down free sites during traffic spikes that doesn't match attack patterns, but instead forgiving any bills from legitimate mistakes after the fact. Apologies that this didn't come through in the initial support reply.

You should rethink this policy. Someone could panic and do something unthinkable, then you'd wish bad press was the only thing on your conscious.

Re: Netlify just sent me a $104k bill for a simple static site

#828

Post by foxandmouse »

leerob wrote: post #823
foxandmouse wrote: post #763

If Netlify and Vercel don't offer ddos protection, or at least a spend limit.. any other recommendations for next/ react hosting?

(I work at Vercel) We do have DDoS protection, and spend limits. We're imminently launching improvements to both of these as well Importantly, OP was on a free tier on Netlify which does allow you to pay for additional usage on demand. Vercel's free tier does not – if you are on a hobby plan and you go over the included usage, your site will be paused automatically. 1: https://vercel.com/blog/introducing-spend-manage…

Thank you for clarifying, and sorry for making that incorrect statement.

Re: Netlify just sent me a $104k bill for a simple static site

#829

Post by oofdoof »

It’s crazy to me that platforms like these don’t have a reasonable spend limit set by default or easily configured.

I understand it can be difficult to stop spending exactly at a certain amount to the cent or event to the dollar or, hey, tens of dollars if traffic is really crazy. But hundreds? Thousands? Tens of thousands? Your system should be able to measure that and stop it in time.

Re: Netlify just sent me a $104k bill for a simple static site

#830

Post by Capricorn2481 »

sph wrote: post #795
Capricorn2481 wrote: post #727

Earlier quoted context omitted.

I don't understand this take. First of all, moving off of Cloudflare is trivial if you really have an alternative. Second of all, self hosting a static website is easy, but that's not we're talking about here. We're talking about DDoS mitigation, which is not gonna be solved over a weekend hack with a load balancer. At least, not at the scale that matters. What would the Cloudflare going evil phase even look like? Is…

You mean that all the people on HN that use Cloudflare's very generous free tier are at risk of DDOS? Of course there is a benefit to selling your soul to the devil, what's the bloody point otherwise? I do not need to hear all the good things the devil got you, I am telling you that it is silly that "go Cloudflare" is the default advice is any situation because we have become lazy and complacent and we do not really…

> You mean that all the people on HN that use Cloudflare's very generous free tier are at risk of DDOS?

Yes? That's what this story is about. A random small website incurred a 100k charge because someone had the boredom to DDOS them today. Do you think you're not at risk?

> The Internet gets shittier because people are lazy, and I need better arguments to being complicit to this than "I need DDoS protection for my 100-visitor a month blog."

Gonna need you to explain the mechanism here. Because my argument is that Cloudflare is not the devil no matter how much you say it, and that using their service doesn't give them any keys.

What exactly are people lazy about and what are you doing alternatively that makes you different? Just not using Cloudflare? Because that's like not using condoms because you don't want to support a condom monopoly.

Post reply on HN