57 ms·

Heroku can be expensive. You're looking at $240/yr just for SSL (vs. $0 - $30/yr for non-wildcard SSL). For a 1GB VPS, a dyno costs ~3x as much as Digital Ocean

by logn 12y ago

Heroku can be expensive. You're looking at $240/yr just for SSL (vs. $0 - $30/yr for non-wildcard SSL). For a 1GB VPS, a dyno costs ~3x as much as Digital Ocean. For protection from cyber crime, you might be better off paying an insurance company than Heroku prices.

michaelbuckbee 12y ago
Heroku is expensive from a hosting perspective but cheap from a sysadmin cost perspective. And it's this total cost of running a service (or at the very least the opportunity cost of not working on things essential to your business and the risk of your site getting screwed by somebody malicious) that I'm trying to convey. For a business, $240/year to get a SSL terminating load balancer maintained by a dedicated security sysadmin team to sit in front of their app looks like a heckuva deal. There is just so much work that is involved in keeping a system properly up and secure that unless you're valuing your time at near zero dollars an hour, or you have so much traffic and cash coming in that you can get a dedicated person to handle it Heroku makes monetary sense.
- logn 12y ago
  I guess for me, part of the value of my service is the infrastructure. And I sell based on server instance, so any added cost gets passed to the customer (or deducted from my earnings). For someone competent with sysadmin work, I think it's maybe worth the time. It's not like for any hour not spent on my systems I'd otherwise be earning $200 automatically. My message would just be for people to not be intimidated by the concept of something being so much work that it's not worth your time. I saw that argument for years with email as apparently conventional wisdom. I've been hosting my own email for years now with about 3 hours of upfront work and (almost) none thereafter.
  - mechanical_fish 12y ago
    Hosting your own email works great until you try to actually send any. [1] But if you send enough, you eventually have to deal with the spam infrastructure. Customers will complain that critical transactional emails ended up in user spam folders. One person too many will accidentally mark one of your mails as spam. Or you'll relaunch some cloud infrastructure and suddenly your IP is one that is on all the blacklists because of some earlier history that you could never have known. Or one of your customers will innocently assume that you are Mailchimp and send a whole bunch of marketing email through your server. The symptom of any such problem is that email starts falling into the garbage, perhaps silently. But if you are watching your stats like a hawk (a costly and very boring hobby ) - or, much more likely, if your customers start screaming about the very-real high costs of lost email - you will figure that out within a few days, so it might not take more than another day to figure out how to get yourself off the blacklist (a manual process) and how to apologize to customers for the lost email (a manual process). But, if you value your time at in any way, your first encounter with that problem will be your last, because email services are cheap and easy. I have yet to pay for mine; in small quantities Mailchimp, Mailgun et al are free. Indeed, given that low cost, why wait to get burned before you stop playing with fire, even if the fire looks cute and innocent and warm right now? [1] Actually, I'm lying: A much more serious problem which occurs at any volume is that email is another piece of the security perimeter. Even if mail servers had almost no configuration and a history of bug-free operation - which they do not, I am joking, and the joke is not very funny - one of the basic rules of security is to put as much distance as possible between your data and services which connect to outside machines. Mailgun is free in small quantities and runs outside your entire datacenter. The math kind of does itself.
    - logn 12y ago
      I was referring to just normal, non-automated emails above. An alternative to say, Google Apps, where I can fit an entire email server on a VPS with less than 400 MB memory, vs $10/user with Google. I agree with you for transactional email. For any DIY project there's a limit where you really should just pay someone. But for instance I run wrote my own Stripe-based invoice generation, subscription management, and dunning vs paying for a service. It works for me for now. If one day my little app breaks down if/when I have thousands of customers then I'll outsource it. I run my own private Git repo vs paying $7 to github. Etc. Edit: to add, I am selling software I wrote basically from scratch (and there's no way around that). Like a comment way up above, my biggest risk is in that stack. I suppose with the uber-paranoid mindset I should have outsourced my own development work. At the end of the day, someone like me is responsible for something important. It's not life or death with my software so at least I got that.

by logn 12y ago

michaelbuckbee 12y ago

Heroku is expensive from a hosting perspective but cheap from a sysadmin cost perspective. And it's this total cost of running a service (or at the very least the opportunity cost of not working on things essential to your business and the risk of your site getting screwed by somebody malicious) that I'm trying to convey. For a business, $240/year to get a SSL terminating load balancer maintained by a dedicated security sysadmin team to sit in front of their app looks like a heckuva deal. There is just so much work that is involved in keeping a system properly up and secure that unless you're valuing your time at near zero dollars an hour, or you have so much traffic and cash coming in that you can get a dedicated person to handle it Heroku makes monetary sense.

logn 12y ago
I guess for me, part of the value of my service is the infrastructure. And I sell based on server instance, so any added cost gets passed to the customer (or deducted from my earnings). For someone competent with sysadmin work, I think it's maybe worth the time. It's not like for any hour not spent on my systems I'd otherwise be earning $200 automatically. My message would just be for people to not be intimidated by the concept of something being so much work that it's not worth your time. I saw that argument for years with email as apparently conventional wisdom. I've been hosting my own email for years now with about 3 hours of upfront work and (almost) none thereafter.
- mechanical_fish 12y ago
  Hosting your own email works great until you try to actually send any. [1] But if you send enough, you eventually have to deal with the spam infrastructure. Customers will complain that critical transactional emails ended up in user spam folders. One person too many will accidentally mark one of your mails as spam. Or you'll relaunch some cloud infrastructure and suddenly your IP is one that is on all the blacklists because of some earlier history that you could never have known. Or one of your customers will innocently assume that you are Mailchimp and send a whole bunch of marketing email through your server. The symptom of any such problem is that email starts falling into the garbage, perhaps silently. But if you are watching your stats like a hawk (a costly and very boring hobby ) - or, much more likely, if your customers start screaming about the very-real high costs of lost email - you will figure that out within a few days, so it might not take more than another day to figure out how to get yourself off the blacklist (a manual process) and how to apologize to customers for the lost email (a manual process). But, if you value your time at in any way, your first encounter with that problem will be your last, because email services are cheap and easy. I have yet to pay for mine; in small quantities Mailchimp, Mailgun et al are free. Indeed, given that low cost, why wait to get burned before you stop playing with fire, even if the fire looks cute and innocent and warm right now? [1] Actually, I'm lying: A much more serious problem which occurs at any volume is that email is another piece of the security perimeter. Even if mail servers had almost no configuration and a history of bug-free operation - which they do not, I am joking, and the joke is not very funny - one of the basic rules of security is to put as much distance as possible between your data and services which connect to outside machines. Mailgun is free in small quantities and runs outside your entire datacenter. The math kind of does itself.
  - logn 12y ago
    I was referring to just normal, non-automated emails above. An alternative to say, Google Apps, where I can fit an entire email server on a VPS with less than 400 MB memory, vs $10/user with Google. I agree with you for transactional email. For any DIY project there's a limit where you really should just pay someone. But for instance I run wrote my own Stripe-based invoice generation, subscription management, and dunning vs paying for a service. It works for me for now. If one day my little app breaks down if/when I have thousands of customers then I'll outsource it. I run my own private Git repo vs paying $7 to github. Etc. Edit: to add, I am selling software I wrote basically from scratch (and there's no way around that). Like a comment way up above, my biggest risk is in that stack. I suppose with the uber-paranoid mindset I should have outsourced my own development work. At the end of the day, someone like me is responsible for something important. It's not life or death with my software so at least I got that.