I got a call late last night that my friend's e-commerce site was paralyzed by DDoS again. He laughed bitterly on the other end of the phone and said, \u201cThis is the third time this month, and the cloud server bill is higher than the revenue.\u201d I remotely help him switch traffic while shaking my head - too many people wait until the business collapsed before remembering the firewall of high defense CDN.<\/p>\n
Now the so-called \u201cpromotional activities\u201d of various vendors fancy, newcomers look to send coupons to rush in, and found that the hidden terms than the protection rules are more complex. I have tested more than a dozen high defense services, some of the first year cheap renewal fee doubled, some default configuration can not prevent real attacks. Today we will break open the rubbing said, how to woolgathering at the same time not to be anti-gathering.<\/p>\n
How deep are the waters of high defense CDNs?<\/strong>Last year to help a financial platform to do migration, I compared three vendors of \u201centerprise-class protection package\u201d. The same nominal 2Tbps protection, CDN5 encountered SYN Flood directly triggered a black hole, CDN07 Anycast node latency fluctuations to packet loss, and ultimately only 08Host to carry the real pressure test. Here's a counterintuitive conclusion:Bandwidth numbers may just be a marketing game<\/strong>What really matters is the geographic distribution of cleaning centers and the ability of operators to collaborate.<\/p>\n Newbies are most likely to be attracted by the \u201cfree trial\u201d, but do not believe those unlimited trial commitment. There was a customer with a vendor's 30-day trial, the expiration of the data did not migrate in a timely manner, the result was charged at the original price of the traffic charges - 0.15 yuan per second \/ G sudden traffic directly to the account owed five figures. The real offer should be like 08Host: new customers to send 2,000 yuan coupon but express the scope of use (can only offset DDoS traffic cleaning costs), while providing 7 days no reason refund guarantee.<\/p>\n Dissecting Manufacturers' Pricing Follies<\/strong>You can see that CDN07\u201cs quotation says \u201d$0.08\/GB\u201c. You can see that CDN07\u201ds quotation says \"$0.08\/GB\", but in small print it says \"only for HTTP cache traffic\". In fact, their attack traffic billing rules are: free basic cleaning, more than 100Gbps billed at 0.3 yuan \/ GB. I monitored the data of an e-commerce platform during the Double Eleven last year - 4TB of attack traffic was cleaned on that day, and the bill directly skyrocketed 20 times more than usual. And CDN5 using step pricing: the first 50Gbps fixed charge 1999 yuan \/ month, beyond the part of the price instead reduced to 0.12 yuan \/ GB, more suitable for sudden attack scenarios.<\/p>\n Say a real case: a game company used a vendor called \u201cunlimited protection\u201d, the results of the CC attack when the CPU runs full resulting in business interruption. Later found that their \u201cunlimited\u201d refers to the direct black hole without cleaning, essentially the same as unplugging the network cable. Now I will especially check the CC protection logic of the service provider, such as 08Host's seven-layer protection default open human verification, but also according to the frequency of API calls dynamic release:<\/p>\n The correct posture of woolgathering<\/strong>. First of all, staring at the special benefits for new customers - CDN5 is now registered to send 2000 yuan of experience gold (can be deducted from any cost), CDN07 is sent to the 50GB free traffic packages, but limited to 30 days to use. Highlighted 08Host's \u201creverse price cutting\u201d activities: you mention the exchange vendor's competing offer, they are additional subsidies 10%. I have helped customers operate from a cloud vendor to transfer directly from the other side of the contract price to get a discount on the discount.<\/p>\n Business users remember the grand finale:Talk to sales directly about customized packages<\/strong>. Last year we took CDN5\u201cs ten million dollar order, and the key bargaining chip was the commitment to dispatch 80% business traffic to their cold nodes (such as Urumqi and Hohhot nodes). These nodes have low bandwidth costs, and the vendor is willing to give up to 30% discount. If you spend more than 100,000 per month, try saying something like this, \u201dThe other two are giving up to a 35% discount, I'll sign the contract this week if I can match it.\"<\/p>\n Technical team to focus onHidden cost traps<\/strong>. Many vendors charge extra for HTTPS requests ($0.20 per million) and WebSocket connections are billed separately ($0.01 per million minutes). There was an IoT project that fell victim to this - the devices stayed connected for a long time resulting in an increase of 47% in the monthly bill. now I will force vendors to clearly spell out all billing items in the contract, like 08Host's contract that states \u201cno extra encryption charges! \u201d.<\/p>\n Configuration optimization is really saving money. For example, set up precise caching rules to reduce the return flow, I have tested an information site by adjusting the caching strategy, the flow cost down 38%:<\/p>\n Finally, I'll give a storm theory:Offers that don't take into account the characteristics of your business are a joke.<\/strong>The first thing you need to do is to get a good deal of money to pay for it. Video station do not choose the number of requests billing program, cross-border e-commerce must be required to have quality nodes in Europe and the United States, financial services have to confirm whether there is a SLA compensation clause (such as 08Host commitment to availability below 99.95% refund the cost of the month). I have seen the most pitiful program is a vendor to the African business recommended North American nodes, latency more than 400ms also called \u201cglobal acceleration\u201d.<\/p>\n Now click on the 08Host official website's \u201centerprise preferential\u201d page, enter the code word \u201cANTIDDOS\u201d can also receive an additional 3 months of WAF protection. But remember that the discount is just a knock on the door, the real value is encountered unexpected attacks, technical support response speed can do 5 minutes level - just this month to help a friend recover from an attack of 800Gbps, 08Host engineers directly pull the group to remotely configure the BGP diversion, the experience of this service is much more important than the money saved! The most important thing is that you have to be able to get the most out of your time.<\/p>\n At the end of the day, the essence of saving money with a high defense CDN is toPaying for Precision Protection<\/strong>.. Newcomers will prefer to choose a clearly priced solution that supports elastic scaling, while veterans will have to learn to negotiate using business features. Next time you see a \u201cfree for life\u201d advertisement, remember to ask: \u201cIs the cleaning center built on the cloud?\u201d (Manual dog head)<\/p>","protected":false},"excerpt":{"rendered":" I got a call late last night that my friend's e-commerce site was paralyzed by DDoS again. He laughed bitterly on the other end of the phone and said, \u201cThis is the third time this month, and the cloud server bill is higher than the revenue.\u201d I remotely help him switch traffic while shaking my head - too many people wait until their business collapses before remembering the firewall of high defense CDN. Now the so-called \u201cpromotional activities\u201d of various vendors are fancy, newcomers look at the vouchers sent to rush in, only to find that the hidden terms and conditions than the protection rules are more complex. I have tested more than a dozen high defense services, some of the first year of cheap renewal fee doubled, some default configuration simply can not prevent real attacks. Today we will break open the rubbing said, how to woolgathering at the same time not to be anti-weed. How deep is the water of high defense CDN? Last year to help a financial platform to do migration, I compared the three vendors of the \u201centerprise-level protection package\u201d. The same labeled<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"gallery","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"categories":[150],"tags":[],"collection":[],"class_list":["post-949","post","type-post","status-publish","format-gallery","hentry","category-updates","post_format-post-format-gallery"],"_links":{"self":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts\/949","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/comments?post=949"}],"version-history":[{"count":1,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts\/949\/revisions"}],"predecessor-version":[{"id":1176,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/posts\/949\/revisions\/1176"}],"wp:attachment":[{"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/media?parent=949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/categories?post=949"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/tags?post=949"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/www.ddosgj.com\/en\/wp-json\/wp\/v2\/collection?post=949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}