4 ms·

Wow that is pretty steep pricing. The lowest tier that seems usable is the $75/mo one. Then again if you're locked into Heroku then even $1,250/mo isn't that mu

by sehrope 13y ago

Wow that is pretty steep pricing. The lowest tier that seems usable is the $75/mo one. Then again if you're locked into Heroku then even $1,250/mo isn't that much for piece of mind and added security. I'm sure whoever is paying for it is happy it's available. This was one of the reasons we handled server deployments ourselves for our startup. The cloud version of our app runs in production on AWS in a VPC so all outbound traffic is NATed through a single public IP. With reserved instances it costs about $22/mo for the NAT gateway and setup was pretty straightforward.

agwa 13y ago
> all outbound traffic is NATed through a single public IP. With reserved instances it costs about $22/mo for the NAT gateway and setup was pretty straightforward. I've considered doing this myself so I'm curious: are you getting good network performance through the NAT gateway? What instance type are you using?
- sehrope 13y ago
  No issues to speak of so far. Our app databases are in the VPC itself so our own traffic does not get routed through the NAT gateway but I haven't heard any issues from users either. At the moment we're using an m1.small for the NAT itself though if you have perf issues you can bump that up as well. I would guess a c1.medium would be more appropriate though as I said we haven't had any issues so haven't considered changing anything yet. Here's a speed test through from a m1.small through the NAT (27.5 MB/s): $ curl -o /dev/null http://speedtest.wdc01.softlayer.com/downloads/test500.zip % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 500M 100 500M 0 0 27.5M 0 0:00:18 0:00:18 --:--:-- 29.2M Here's a speed test from a m1.small vanilla EC2 instance outside the NAT (38.2 MB/s): $ curl -o /dev/null http://speedtest.wdc01.softlayer.com/downloads/test500.zip % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 500M 100 500M 0 0 38.2M 0 0:00:13 0:00:13 --:--:-- 34.1M
  - agwa 13y ago
    This is great info - thanks! :-)
rdl 13y ago
I can't believe all people don't use VPC whenever they have >1 instance in AWS.
- ceejayoz 13y ago
  It's actually now the default for new accounts. http://aws.typepad.com/aws/2013/03/amazon-ec2-update-virtual-private-clouds-for-everyone.html http://aws.typepad.com/aws/2013/03/amazon-ec2-update-virtual...

by sehrope 13y ago

agwa 13y ago

> all outbound traffic is NATed through a single public IP. With reserved instances it costs about $22/mo for the NAT gateway and setup was pretty straightforward. I've considered doing this myself so I'm curious: are you getting good network performance through the NAT gateway? What instance type are you using?

sehrope 13y ago
No issues to speak of so far. Our app databases are in the VPC itself so our own traffic does not get routed through the NAT gateway but I haven't heard any issues from users either. At the moment we're using an m1.small for the NAT itself though if you have perf issues you can bump that up as well. I would guess a c1.medium would be more appropriate though as I said we haven't had any issues so haven't considered changing anything yet. Here's a speed test through from a m1.small through the NAT (27.5 MB/s): $ curl -o /dev/null http://speedtest.wdc01.softlayer.com/downloads/test500.zip % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 500M 100 500M 0 0 27.5M 0 0:00:18 0:00:18 --:--:-- 29.2M Here's a speed test from a m1.small vanilla EC2 instance outside the NAT (38.2 MB/s): $ curl -o /dev/null http://speedtest.wdc01.softlayer.com/downloads/test500.zip % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 500M 100 500M 0 0 38.2M 0 0:00:13 0:00:13 --:--:-- 34.1M
- agwa 13y ago
  This is great info - thanks! :-)

rdl 13y ago

I can't believe all people don't use VPC whenever they have >1 instance in AWS.

ceejayoz 13y ago
It's actually now the default for new accounts. http://aws.typepad.com/aws/2013/03/amazon-ec2-update-virtual-private-clouds-for-everyone.html http://aws.typepad.com/aws/2013/03/amazon-ec2-update-virtual...