9 ms·

Heroku is without a doubt one of the more expensive options out there. SSL being billed per month? Yikes. SSL really should be standard.

• jacques_chester 11y ago
  Heroku is enornmously featuresome and convenient. Simply not having to think about how to stage, locate and run an app saves a lot of visible and hidden engineering time. Source: I work for a company which donates engineering time to what is, in some respects, a Heroku competitor (Cloud Foundry).
  • deleted 11y ago
    [deleted]
• kyleblarson 11y ago
  I migrated from Heroku to OpsWorks a year ago and couldn't be happier.
  • destroytoday 11y ago
    Great to hear! My goal is to transition to AWS this year. I'll be sure to write about the cost differences.
    • brohoolio 11y ago
      I'd look at Google compute because of the auto discounts. Reservations are a pain the ass if your service keeps growing and shrinking.
    • ahmd 11y ago
      have a look at https://forge.laravel.com https://forge.laravel.com
    • kyawz 11y ago
      Maybe https://liquidsky.singtel-labs.com/ https://liquidsky.singtel-labs.com/ can help you with that transition, especially when/if you need to iterate through your cloud environment repetitively until you get to a comfortable one
• saevarom 11y ago
  As far as I can tell, the cost of the SSL endpoint on Heroku is almost exactly the same as the cost of a separate Elastic Load balancer, which you need to terminate the SSL connection before it reaches your app. So Heroku is really just selling this feature at cost.
  • yeukhon 11y ago
    I don't remember additional charge for using SSL with ELB (but ELB is extremely dumb so if you want to apply fancy headers and rules, ELB is out of question, either roll out Nginx or HAProxy with ELB governing failover. Direct R53 failover only works with public zone). Looking at https://devcenter.heroku.com/articles/ssl-endpoint https://devcenter.heroku.com/articles/ssl-endpoint using SSL as an addon for $20/M is expensive. With ELB I can pay namecheap for an SSL cert for like $10-$30 once and be done with it.
• s_kilk 11y ago
  It seems like Heroku's business model is to make it easy for startups to build on their platform and then bleed them dry of all their investment money.
• arikrak 11y ago
  You can get free SSL from CloudFlare and connect it with the free SSL option at https://yourApp.herokuapp.com https://yourApp.herokuapp.com. (That's what I use at https://www.learneroo.com https://www.learneroo.com)
  • icebraining 11y ago
    The only potential problem is that Cloudflare doesn't check the validity of the herokuapp.com cert, so in theory someone could MITM the connection. In practice, I'm not sure how you'd even get Cloudflare to connect to the rogue proxy, short of taking control of the DNS of *.herokuapp.com.
    • grapehut 11y ago
      That's not true, when you setup crypto in cloudflare you need pick between "Full SSL (Strict)" which requires a valid certificate, and "Full SSL (non-strict)" which allows you to use a self-signed certificate or what not, but there's no reason you should be using that mode if you already have a valid certificate (as is the heroku case).
      • icebraining 11y ago
        "Full SSL (Strict)" doesn't work with the certificate provided for free by Heroku: By default Heroku offers a wildcard SSL certificate which only covers ‘*.herokuapp.com’. This means that ‘Full SSL’ can be utilized as a default, which does not require that the SAN contains your FQDN. To utilize Full (Strict) you will need to add your own SSL certificate to your Heroku app, which can be done by using their ‘SSL Endpoint’ add-on. https://support.cloudflare.com/hc/en-us/articles/205893698-Configure-CloudFlare-and-Heroku-over-HTTPS https://support.cloudflare.com/hc/en-us/articles/205893698-C...
• patja 11y ago
  It can get worse. Azure websites charges $39/month per cert for full IP-based SSL
  • biot 11y ago
    Unless you need to support ancient devices, SNI SSL on Azure is $9/month.
• funkyy 11y ago
  The bill looks huge. You can get SSL for like $8/year from reseller for one of the Symantec ones. I think that starting startup can cut a lot of corners by using open source resources and cheap cloud servers like DO.
  • hackerboos 11y ago
    You can get SSL for free: https://letsencrypt.org/ https://letsencrypt.org/
    • funkyy 11y ago
      Yeah, I compared his paid to other paid. afaik not all companies are OK to use free SSL since it seems it is still a novelty.
    • smackfu 11y ago
      As of Dec 2015, and the app beta started in Sep 2014.
  • flurdy 11y ago
    I think people are misunderstanding the SSL costs for Cusion. The SSL certificate expense is listed as $99/year from namecheap, ie. $8.25/month, so there seems no need to get a Symantec one. However they/it/he are paying Heroku $20/month for handling the SSL traffic, not the certificate itself, which probably includes running a load balancing server in front of their apps that automate the SSL termination across nodes. Which seems like a fair cost to me. I think the description of this cost is the error which causes the confusion.
    • funkyy 11y ago
      $99/year vs $8/year for 5 minutes job sounds like a good saving at least for me.