Recently, I helped my friend's company to choose a high-defense CDN, and I was shocked by the domestic and foreign quotations - the same 100G defense, the price of overseas packages directly doubled with a corner. The boss slapped the table on the spot: \u201cThese days even the traffic should be divided into nationality discrimination?\u201d<\/p>\n
It's really not discriminatory, actually. I dismantled seven service providers offer contract (including CDN5, CDN07 and 08Host these old geezer), found that the overseas high defense expensive justified. First throw a test data: a central region of 100G defense +2TB traffic package, CDN5 offer less than 4,000 per month; the same configuration in the U.S. nodes, 08Host direct price 9,000 8, but also note \u201cdoes not include the optimization of lines in East Asia\u201d.<\/p>\n
The cost of bandwidth is the price black hole. Domestic BGP bandwidth cost per G can be pressed to 200-300 yuan, to Europe and the United States directly soared to 600 +. Especially the anti-DDoS bandwidth - overseas attack traffic does not move a few hundred G to start, the operator has to reserve redundant bandwidth to deal with emergencies, these silent costs are fully amortized into the offer. Once I tested in the Tokyo node of CDN07, 3:00 a.m., a sudden influx of 270G UDP flood, their cleaning center to switch routes in seconds, behind the burn is the redundant bandwidth of real money.<\/p>\n
The complexity of the defense system is the hidden boss, most of the domestic high defense against SYN Flood, CC and these conventional attacks, overseas attack patterns can be filmed as a hacker movie: from TCP reflection to HTTPS slow attack, and even targeted blasting for WebSocket. Last year, we helped our e-commerce customers to deal with a wave of \u201cBotnet Carnival\u201d - a mixed attack launched by broilers from 134 countries around the world at the same time, and the overseas high-defense clusters carried it by real-time behavioral analysis, but the research and development cost of this kind of intelligent cleaning system was finally reflected in the quotation \u201cBotnet Carnival\u201d. The cost of developing this kind of intelligent cleaning system is finally reflected in the \"Advanced Threat Mitigation\" section of the quotation.<\/p>\n
Compliance costs are ignored by many people. European GDPR, the U.S. CCPA privacy act, CDN service providers must deploy localized data auditing and log retention system. 08Host's German nodes why 40% more expensive than Malaysia because they hired a team of two local lawyers specializing in compliance documents. These invisible costs in China do not need to be considered at all.<\/p>\n
As an example look at the configuration differences:<\/p>\n
Don't look at just a few more lines of code, behind the scenes is a whole set of AI behavior analysis engine in the money. Most domestic attacks below 100G can be handled with a basic rule base, overseas dynamic modeling without machine learning simply can not play - hacker gangs are now using deep learning to generate attack traffic.<\/p>\n
Line optimization is the price assassin. Pure overseas nodes are not expensive, but once you ask for \u201caccelerated access for Chinese users\u201d, the price immediately takes off. The price of a dedicated line directly connected to China and the United States is three times that of an ordinary international line, not to mention the luxury of CN2 GIA.CDN07\u201cs optimized lines in China and the United States are explicitly priced at $3800 per Gbps per month, while an ordinary international line is only $1200.Many customers choose an ordinary line to get a cheaper price at the beginning, and then they are spit out by the domestic users who say that the card has become a PPT. \u201dAfter the upgrade, but spend more money.<\/p>\n
Don't believe in the \u201cglobal price\u201d. Some vendors brag about the same price for global nodes, I took the test tool and ran it once to reveal - the New York node traffic to Singapore, latency plummeted from 180ms to 380ms, customer service admitted that \u201cthe preferential price is limited to the local area traffic\u201d. If you really want to do global business, you still have to honestly buy multi-location deployment:<\/p>\n
Practical advice: If the user is all in the territory, close your eyes and choose the domestic high defense. If you really want to go to sea, Southeast Asia preferred Singapore nodes (08Host Southeast Asia cleaning center with the highest cost-effective), Europe and the United States business with CDN5 New York + Frankfurt double node group BGP broadcast, do not buy the \u201cUnited States West single node\u201d---! The Los Angeles server room is used as a test range by the DDoS team every day.<\/p>\n
Finally burst a bubble: some vendors boast \u201cunlimited defense capacity\u201d, the actual test more than 500G direct null route. If you really want to have a large traffic attack needs, directly find Cloudflare Enterprise Edition or Akamai to talk about customized solutions, although expensive, but at least do not dump the pot. Remember to specify in the contract \u201ccleaning failure full refund\u201d, I once rely on this clause from a vendor to recover three months of expenses.<\/p>\n
Behind the price war are catnip. A vendor reported overseas 100G defense per month 2999 fairy price, buy only to find that only \u201ctheoretical defense value\u201d - the real situation is more than 80G directly back to the source, the source IP exposure of the moment the server is directly washed out. Now I ask vendors to provide real-time defense log API, with self-built monitoring platform against the MRTG traffic graph verification:<\/p>\n
In the end, high defense CDNs buy a sense of security. Domestic security environment is like a regular ring game, overseas is completely jungle fighting. The price difference reflects the real cost difference - after all, the loss of 500G traffic knocked down overseas, enough to buy three years of high defense services. Suggest that you do the budget directly according to the \u201cdomestic offer \u00d7 2.5\u201d set aside overseas quota, the remaining money enough to buy a few boxes of Red Bull emergency operation and maintenance team.<\/p>","protected":false},"excerpt":{"rendered":"
Recently, I helped my friend's company to choose a high-defense CDN, and I was shocked by the domestic and foreign quotations - the same 100G defense, the price of overseas packages directly doubled with a corner. The boss slapped the table on the spot: \u201cThese days even the traffic should be divided into nationality discrimination?\u201d In fact, it really is not discrimination. I dismantled seven service providers offer contract (including CDN5, CDN07 and 08Host these old geezers), found that the overseas high defense expensive justified. First throw a test data: a central region of 100G defense +2TB traffic package, CDN5 offer less than 4,000 per month; the same configuration in the U.S. nodes, 08Host direct price 9,000 8, but also note \u201cdoes not include the optimization of lines in East Asia\u201d. The cost of bandwidth is the price black hole. Domestic BGP bandwidth cost per G can be pressed to 200-300 yuan, to Europe and the United States directly soar!<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"gallery","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"categories":[150],"tags":[],"collection":[],"class_list":["post-932","post","type-post","status-publish","format-gallery","hentry","category-updates","post_format-post-format-gallery"],"_links":{"self":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts\/932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/comments?post=932"}],"version-history":[{"count":1,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts\/932\/revisions"}],"predecessor-version":[{"id":1193,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts\/932\/revisions\/1193"}],"wp:attachment":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/media?parent=932"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/categories?post=932"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/tags?post=932"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/collection?post=932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}