3 ms·
>We're starting to ramp up traffic now by orders of magnitude (with many more to come) and it's soooooo awesome knowing the stack is pretty much bombproof. Thi
by jonathan-kosgei 8y ago
>We're starting to ramp up traffic now by orders of magnitude (with many more to come) and it's soooooo awesome knowing the stack is pretty much bombproof.
This does come with additional cost. Serverless pricing doesn't scale, your costs increase linearly with your usage, and there're no discounts for bulk usage or reserved pricing.
We were recently on the receiving end of a massive HTTP GET Flood DDoS and although we did not experience any downtime as a result of it, I ended up finding out about it a few days later when billing alarms started going off.
- k__ 8y agoI read in many places that you should limit your max parallel executions.
- jonathan-kosgei 8y agoWe were wary of limiting paid users. Even with lambda's max concurrent function executions limit, when the function completes in a few milliseconds, the number of invocations per second can still be high.
- k__ 8y agoAnd Shield wasn't an option?
- jonathan-kosgei 8y agoWaf would've required setting up cloudfront in front of our endpoints which would've increased latency. Basic Shield is supposed to be on for all users but I don't think APIG is covered in the range of services covered by their Advanced Protection plan.
- citrablue 8y agoCurious - are you in an industry where you expected bad actors? I'm not blaming you -- far from it! Just wondering how applicable your experience is to the world I normally work in.
- jonathan-kosgei 8y agoNot particularly no.