6 ms·

I have a lot of questions/problems with this. Here are two. 1.) They mention in the compare tiers "Application traffic monitoring" for Advanced. However in the

by Rapzid 10y ago

I have a lot of questions/problems with this. Here are two. 1.) They mention in the compare tiers "Application traffic monitoring" for Advanced. However in the FAQ: "In addition, customers can also use AWS WAF to protect against Application layer attacks". WAF is only available through CloudFront, and CloudFront charges 600 dollars a month for a custom SSL certificate with dedicated IP. So do they have "Application traffic monitoring" outside of WAF? I'm lead to believe not. 2.) They mentioned multiple times you can call on the DRT team to help you. However buried in the FAQ is this little gem: "Response times for DRT depends on the AWS Support plan you are subscribed to". So for 3k/mo I can't get better than 24/hr turnaround when I'm under attack without ALSO having a business/enterprise support plan?

carterehsmith 10y ago
As per the pricing page, looks like you _do_ need support plan: "AWS Shield Advanced is available to customers who are enrolled in either the Enterprise or Business Support levels of AWS Premium Support." https://aws.amazon.com/shield/pricing/ https://aws.amazon.com/shield/pricing/
- Rapzid 10y ago
  Oh wow, thanks! I hadn't noticed that yet :| So many caveats to this thing. Look like I'd need to pony up >1k/mo on top of 3k to get access to the service then...
  - toomuchtodo 10y ago
    AWS is not the place to be if you're on a budget
    - RhodesianHunter 10y ago
      How often are people on a budget the target of serious ddos attacks?
      - water42 10y ago
        The government
      - stcredzero 10y ago
        A better question would be, "How often are people on a budget the target of a budget DDOS attack?" I think we've long since entered the era where DDOS attacks don't have to be "serious" to be massive.
      - derefr 10y ago
        Pretty often, especially in the realm of journalism (Wikileaks et al) and especially in network-security journalism. (Imagine writing exposés about botnet-owners. Imagine what kind of DDoS results from that.)
        devoply 10y ago
        Yes and Amazon is the company to go running to if you are doing things that the establishment does not like. I don't think so.
        Buge 10y ago
        Brian Krebs is basically who you're talking about. https://krebsonsecurity.com/ https://krebsonsecurity.com/
      - Eldt 10y ago
        A lot of game servers (eg Minecraft) get DDoSed by competitor servers or players as revenge
        comex 10y ago
        More generally: I think a decent fraction of the people who think DDoSing is an appropriate way to deal with personal vendettas are kids. The targets of kids' vendettas are often also kids. Kids tend to have low budgets. (The budget required to launch a DDoS, through one of the many commercial websites that sell them, is pretty low.)
  - dsmithatx 10y ago
    See above, business level support 24/7 with phones is $100/month.
    - Rapzid 10y ago
      For people paying less than 1k on their bill, or am I missing something? I feel pretty confident in the layout I... Laid out.
  - carterehsmith 10y ago
    Hmmm, reading further, there is a 12-month commitment on the $3,000/month plan. So if you get hit by DDOS, you can't just pay $3,000 and hope that DDOS is gone within a month. Looks like you have to sign up for a year's worth of protection.
beachstartup 10y ago
for $3k/month i wouldn't expect a competent human being to be on call 24/7, which is what you're asking for. this is one thing that does not enjoy economies of scale. competent people working under pressure at 3AM on a holiday are extremely expensive. would _you_ do that job? and how much do you get paid?
- Someone1234 10y ago
  Why? It isn't dedicated support. A single support rep could have hundreds of theoretical clients. Amazon.com manages to have 24/7 chat support and they certainly aren't charging $3K/month. That's just the power of multi-tasking.
  - beachstartup 10y ago
    sounds like you've stumbled onto a fantastic entrepreneurial business opportunity. i say you should go for it!
    - aroch 10y ago
      I think you're being rather uncharitable to the GP. Essentially no host, managed or unmanaged, has a 1 engineer:1 customer ratio. Most of the big names in DDoS protection, looking only at enterprise tier support, have tens of clients per network support tech minimum.
    - nothrabannosir 10y ago
      What, clone aws and offer better support? I feel like you're trying to mock him for being so self evidently wrong that it's (apparently) funny, but I don't see it. How does criticism of a support model lead to "then you do it"? Or are you implying something else? That's what I hate about these coy between-the-lines replies in chat forums. It's not obvious and I don't know what to reply to! Just say what's on your mind, don't play games. Give the rest of us a chance to reply to something. /rant, sorry :)
- snowwrestler 10y ago
dsmithatx 10y ago
24/7 Business support starts at $100/month and includes phone support. We have Enterprise level support which starts at $15,000/month and is very comprehensive. Then again we also have 90k employees. https://console.aws.amazon.com/support/plans/home?region=us-east-1#/ https://console.aws.amazon.com/support/plans/home?region=us-...

by Rapzid 10y ago

carterehsmith 10y ago

As per the pricing page, looks like you _do_ need support plan: "AWS Shield Advanced is available to customers who are enrolled in either the Enterprise or Business Support levels of AWS Premium Support." https://aws.amazon.com/shield/pricing/ https://aws.amazon.com/shield/pricing/

Rapzid 10y ago
Oh wow, thanks! I hadn't noticed that yet :| So many caveats to this thing. Look like I'd need to pony up >1k/mo on top of 3k to get access to the service then...
- toomuchtodo 10y ago
  AWS is not the place to be if you're on a budget
  - RhodesianHunter 10y ago
    How often are people on a budget the target of serious ddos attacks?
    - water42 10y ago
      The government
    - stcredzero 10y ago
      A better question would be, "How often are people on a budget the target of a budget DDOS attack?" I think we've long since entered the era where DDOS attacks don't have to be "serious" to be massive.
    - derefr 10y ago
      Pretty often, especially in the realm of journalism (Wikileaks et al) and especially in network-security journalism. (Imagine writing exposés about botnet-owners. Imagine what kind of DDoS results from that.)
      - devoply 10y ago
        Yes and Amazon is the company to go running to if you are doing things that the establishment does not like. I don't think so.
      - Buge 10y ago
        Brian Krebs is basically who you're talking about. https://krebsonsecurity.com/ https://krebsonsecurity.com/
    - Eldt 10y ago
      A lot of game servers (eg Minecraft) get DDoSed by competitor servers or players as revenge
      - comex 10y ago
        More generally: I think a decent fraction of the people who think DDoSing is an appropriate way to deal with personal vendettas are kids. The targets of kids' vendettas are often also kids. Kids tend to have low budgets. (The budget required to launch a DDoS, through one of the many commercial websites that sell them, is pretty low.)
- dsmithatx 10y ago
  See above, business level support 24/7 with phones is $100/month.
  - Rapzid 10y ago
    For people paying less than 1k on their bill, or am I missing something? I feel pretty confident in the layout I... Laid out.
- carterehsmith 10y ago
  Hmmm, reading further, there is a 12-month commitment on the $3,000/month plan. So if you get hit by DDOS, you can't just pay $3,000 and hope that DDOS is gone within a month. Looks like you have to sign up for a year's worth of protection.

beachstartup 10y ago

for $3k/month i wouldn't expect a competent human being to be on call 24/7, which is what you're asking for. this is one thing that does not enjoy economies of scale. competent people working under pressure at 3AM on a holiday are extremely expensive. would _you_ do that job? and how much do you get paid?

Someone1234 10y ago
Why? It isn't dedicated support. A single support rep could have hundreds of theoretical clients. Amazon.com manages to have 24/7 chat support and they certainly aren't charging $3K/month. That's just the power of multi-tasking.
- beachstartup 10y ago
  sounds like you've stumbled onto a fantastic entrepreneurial business opportunity. i say you should go for it!
  - aroch 10y ago
    I think you're being rather uncharitable to the GP. Essentially no host, managed or unmanaged, has a 1 engineer:1 customer ratio. Most of the big names in DDoS protection, looking only at enterprise tier support, have tens of clients per network support tech minimum.
  - nothrabannosir 10y ago
    What, clone aws and offer better support? I feel like you're trying to mock him for being so self evidently wrong that it's (apparently) funny, but I don't see it. How does criticism of a support model lead to "then you do it"? Or are you implying something else? That's what I hate about these coy between-the-lines replies in chat forums. It's not obvious and I don't know what to reply to! Just say what's on your mind, don't play games. Give the rest of us a chance to reply to something. /rant, sorry :)
snowwrestler 10y ago

dsmithatx 10y ago

24/7 Business support starts at $100/month and includes phone support. We have Enterprise level support which starts at $15,000/month and is very comprehensive. Then again we also have 90k employees. https://console.aws.amazon.com/support/plans/home?region=us-east-1#/ https://console.aws.amazon.com/support/plans/home?region=us-...