4 ms·
$20/mo for SSL is crazy.
by Shanewho 14y ago
$20/mo for SSL is crazy.
- jarcoal 14y agoIt's because they have to provision an Elastic Load Balancer to sit in front of your app. That's the only way they can acquire additional IP addresses from AWS. They make no money on this arrangement, they are simply passing the ELB costs on to you.
- davepeck 14y agoELB endpoints are domain names, not IP addresses. How would ELB help them "acquire additional IP addresses"?
- jarcoal 14y agoDomains that resolve to an IP... I'm not 100% sure how they are configured behind the scenes, but the ELBs have a bunch of physical IPs wired into them, so they can SSL terminate for many domains, something that EC2 instances cannot (currently) do. So Heroku leverages the ELBs to circumvent the 1 IP address per EC2 instance issue. EDIT: more info here http://serverfault.com/questions/285680/what-is-the-technology-behind-hostname-based-ssl-multiple-ssl-vhosts-on-single http://serverfault.com/questions/285680/what-is-the-technolo...
- ropiku 14y agoUnless you use SNI (which is only supported in some browsers) you have to have one IP per SSL host as the certificate is sent before decoding the request. ELB doesn't use that and must have 1 IP per hostname.
- wmf 14y agoI guess this is an opportunity for any PaaSes that aren't built on EC2.
- jarcoal 14y agoIt definitely is, but AWS has made it clear they will be rolling out multiple IPs per EC2 instance this year. The downsides of not being on EC2 these days are many. You wouldn't be able to offer the fleet of bonus services that Heroku can offer.
- pjscott 14y agoLet's see how many people pay it, and then decide whether or not it's crazy.
- dazbradbury 14y agoOn Appharbor (The Heroku of the .Net world), SNI Based SSL is $10/m, Hostname based SSL is $50/m, and IP-based SSL is $100/m.