2 ms·

The only thing that worries me about usage-based pricing is denial of wallet attacks. You mention there won’t be any surprise bills but if someone decides to ha

The only thing that worries me about usage-based pricing is denial of wallet attacks. You mention there won’t be any surprise bills but if someone decides to hammer my image for 85 TB worth of traffic I don’t see any mechanism that would cap my spend in any way.

coolspot 2y ago
They might be using a hosting that doesn’t charge insane prices for egress. Both Hetzner and DigitalOcean give first 20-23 TB of egress per month for free and then charge $10/TB overage.
- tredre3 2y ago
  They use Bunny CDN who charge about $10/TB (it can be more or less depending on network choice and bulk). If magecdn doesn't support setting a cap then their "no surprise charges" is misleading. But if they do support caps then it should be mentioned in the FAQ imho, it's a selling point.
- mhuffman 2y ago
  From Hetzner's dedicated server pricing page: >All root servers have a dedicated 1 GBit uplink by default and with it unlimited traffic. Inclusive monthly traffic for servers with 10G uplink is 20TB. There is no bandwidth limitation. We will charge € 1/TB for overusage
shubhamjain 2y ago
BunnyCDN, the one I am using, does offer DDoS protection[1]. I would say that there's some inherent risk in that happening when you're using a CDN or hosting for that matter. None of the CDNs I know offer a spending limit. But as a small business, I am willing to understand the situation and waive off the charges on case-to-case basis. On the other hand, if you incurred that kind of egress on Cloudfront, you'd have no option but to pay. The bigger platforms rarely budge in these kind of situations. I would also add that large-scale DDoS attacks (something like 80+TB!!) are unusual, especially when the target is just a small website. [1]: https://bunny.net/network/ddos-protection/ https://bunny.net/network/ddos-protection/
- anonzzzies 2y ago
  We had instances in the past where an image (or other user generated content) suddenly got popular in china or japan and suddenly exhibited the same behaviour as a DDOS but it wasn't; just many people sending eachother the link to it. We got some lovely bills for that and had to build protections for it. This was a while ago, but it was a PITA considering this was a little fun free tool we built with no intentions of doing that much work on it.

coolspot 2y ago

They might be using a hosting that doesn’t charge insane prices for egress. Both Hetzner and DigitalOcean give first 20-23 TB of egress per month for free and then charge $10/TB overage.

tredre3 2y ago
They use Bunny CDN who charge about $10/TB (it can be more or less depending on network choice and bulk). If magecdn doesn't support setting a cap then their "no surprise charges" is misleading. But if they do support caps then it should be mentioned in the FAQ imho, it's a selling point.
mhuffman 2y ago
From Hetzner's dedicated server pricing page: >All root servers have a dedicated 1 GBit uplink by default and with it unlimited traffic. Inclusive monthly traffic for servers with 10G uplink is 20TB. There is no bandwidth limitation. We will charge € 1/TB for overusage

shubhamjain 2y ago

BunnyCDN, the one I am using, does offer DDoS protection[1]. I would say that there's some inherent risk in that happening when you're using a CDN or hosting for that matter. None of the CDNs I know offer a spending limit. But as a small business, I am willing to understand the situation and waive off the charges on case-to-case basis. On the other hand, if you incurred that kind of egress on Cloudfront, you'd have no option but to pay. The bigger platforms rarely budge in these kind of situations. I would also add that large-scale DDoS attacks (something like 80+TB!!) are unusual, especially when the target is just a small website. [1]: https://bunny.net/network/ddos-protection/ https://bunny.net/network/ddos-protection/

anonzzzies 2y ago
We had instances in the past where an image (or other user generated content) suddenly got popular in china or japan and suddenly exhibited the same behaviour as a DDOS but it wasn't; just many people sending eachother the link to it. We got some lovely bills for that and had to build protections for it. This was a while ago, but it was a PITA considering this was a little fun free tool we built with no intentions of doing that much work on it.