Re:Ask HN: Have you shipped anything serious with a “serverl...
by k__ on Saturday June 23, 2018 @07:52AM
(#17380835)
I read in many places that you should limit your max parallel executions.
Re:Ask HN: Have you shipped anything serious with a “serverl...
by jonathan-kosgei on Saturday June 23, 2018 @08:57AM
(#17381047)
We were wary of limiting paid users. Even with lambda's max concurrent function executions limit, when the function completes in a few milliseconds, the number of invocations per second can still be high.
Re:Ask HN: Have you shipped anything serious with a “serverl...
by k__ on Saturday June 23, 2018 @09:29AM
(#17381173)
And Shield wasn't an option?
Re:Ask HN: Have you shipped anything serious with a “serverl...
by jonathan-kosgei on Saturday June 23, 2018 @09:44AM
(#17381238)
Waf would've required setting up cloudfront in front of our endpoints which would've increased latency.
Basic Shield is supposed to be on for all users but I don't think APIG is covered in the range of services covered by their Advanced Protection plan.
Re:Ask HN: Have you shipped anything serious with a “serverl...
by citrablue on Saturday June 23, 2018 @07:37PM
(#17384064)
Curious - are you in an industry where you expected bad actors?
I'm not blaming you -- far from it! Just wondering how applicable your experience is to the world I normally work in.
Re:Ask HN: Have you shipped anything serious with a “serverl...
by jonathan-kosgei on Monday June 25, 2018 @11:22AM
(#17393090)
Not particularly no.
This does come with additional cost. Serverless pricing doesn't scale, your costs increase linearly with your usage, and there're no discounts for bulk usage or reserved pricing.
We were recently on the receiving end of a massive HTTP GET Flood DDoS and although we did not experience any downtime as a result of it, I ended up finding out about it a few days later when billing alarms started going off.