News for hackers. Stuff that matters.
Re:Icanhazip: A simple IP address tool survived a deluge of ... by LeoPanthera on Monday July 31, 2023 @05:04PM (#36948801)
tl;dr: Bought by Cloudflare.
Re:Icanhazip: A simple IP address tool survived a deluge of ... by cryne on Monday July 31, 2023 @05:12PM (#36948904)
...for a symbolic price because "the fun totally dried up" for the author and he felt the site would be in good hands at Cloudflare.
Re:Icanhazip: A simple IP address tool survived a deluge of ... by alpb on Monday July 31, 2023 @05:13PM (#36948913)
> Their sponsorship of icanhazip.com has saved me tens of thousands of dollars per month.

Can someone please explain how does returning a few hundred bytes of plaintext response can cost thousands of dollars? Either I'm really bad at estimating things or there's some hidden cost somewhere I'm not seeing.

Also why could it not work fine behind a Cloudflare free tier?

Re:Icanhazip: A simple IP address tool survived a deluge of ... by karamanolev on Monday July 31, 2023 @05:17PM (#36948967)
> In 2021, the traffic I once received in a month started arriving in 24 hours. The site went from a billion requests per day to 30-35 billion requests per day over a weekend.

30 billion times 350 bytes (size of my response) is equal to 10.5 terabytes (base-10) a day. 84 terabits per day, 84000/3600/24 ~= 1 gigabit if my math is right. A fully saturated 1 gigabit pipe of worldwide internet costs a lot. So, there.

Re:Icanhazip: A simple IP address tool survived a deluge of ... by alpb on Monday July 31, 2023 @05:30PM (#36949139)
Really interesting. I never heard of this website and was surprised to hear this volume of traffic it's getting. (I always used curlmyip.org or whatsmyip.net|.com). I wonder what is the rationale for providing a non-rate limited service that can be easily abused like this. The volume almost suggests some stuff like IoT devices or other software use this to test internet connectivity. Or botnets?
Re:Icanhazip: A simple IP address tool survived a deluge of ... by thefifthsetpin on Monday July 31, 2023 @05:56PM (#36949440)
I believe that creating a traffic rate-limiting system, which is more cost-effective than simply echoing back the requestor's IP address, is likely to be a complex task. However, I haven't personally performed the calculations to confirm this.
Re:Icanhazip: A simple IP address tool survived a deluge of ... by vlan0 on Monday July 31, 2023 @08:01PM (#36950588)
>Seeing that over 90% of my traffic load was malicious and abusive was frustrating. Dealing with the abuse emails and complaints was worse.

My take. I suspect Cloudflare benefited allowing that traffic. It's another data point/tool in their toolbox against the baddies.

Re:Icanhazip: A simple IP address tool survived a deluge of ... by mhayden on Tuesday August 01, 2023 @08:58AM (#36955380)
That was something I discussed with them and I certainly hope they're doing it now. ;)
Re:Icanhazip: A simple IP address tool survived a deluge of ... by akho on Monday July 31, 2023 @05:25PM (#36949076)
What does the site do that’s needed by 35 billion requests a day? doesn’t it just return n external IP?
Re:Icanhazip: A simple IP address tool survived a deluge of ... by deadbunny on Monday July 31, 2023 @05:27PM (#36949098)
Go read TFA?
Re:Icanhazip: A simple IP address tool survived a deluge of ... by Zetice on Monday July 31, 2023 @06:45PM (#36949886)
At $0.085 per GB (some us-east-1 exfil cost Google gave me), 10TB is... ~$1k/day?

Yeah sorry, I would not pay $30k/mo so y'all could track your external IP addresses...

Re:Icanhazip: A simple IP address tool survived a deluge of ... by TechBro8615 on Monday July 31, 2023 @07:10PM (#36950140)
OP said a fully saturated gigabit link, which generally means you pay for transit ("size of the pipe") rather than "stuff pushed through it." I haven't been in the market for a long time, but 5-10 years ago the price was on the order of $0.50 per mbps, so $500 for a 1000 gbps ("gigabit") link. Usually you buy this with a dedicated server or colocation. You wouldn't want to host this in the cloud because they price gouge you on bandwidth by charging for stuff through the pipe.

And that's if you truly expect to saturate it. If you just want to take the risk and go for oversold fiber, you can pay some nominal price for "unmetered bandwidth" (with the caveat that if you're saturating the pipe, your host will probably make you pay for it eventually).

Re:Icanhazip: A simple IP address tool survived a deluge of ... by Fornax96 on Monday July 31, 2023 @07:10PM (#36950141)
That's ridiculous bandwidth pricing. you can get unmetered gigabit at Hetzner for €20 per month. Need 2 Gb? Order a second server.
Re:Icanhazip: A simple IP address tool survived a deluge of ... by Zetice on Monday July 31, 2023 @07:48PM (#36950495)
Do you think this is an important point?
Re:Icanhazip: A simple IP address tool survived a deluge of ... by lkbm on Monday July 31, 2023 @08:15PM (#36950684)
He was using Hetzner and says it was costing him $200/month. He then had to spin up a second server, presumably increasing the cost, and it was still struggling.

From there traffic doubled, and he moved to Cloudflare Workers. And then traffic 30xed.

I suspect it's more about request count (>300k per second) than raw number of bits.

Re:Icanhazip: A simple IP address tool survived a deluge of ... by bunga-bunga on Monday July 31, 2023 @05:19PM (#36948989)
It mentions 2 petabytes of data per month, plus compute for a trillion requests per month. It sounds like all kinds of optimizations were made so probably it can’t be much cheaper. My guess is that the “tens of thousands” is calculated on CF Workers prices though.
Re:Icanhazip: A simple IP address tool survived a deluge of ... by veave on Monday July 31, 2023 @06:04PM (#36949512)
>Also why could it not work fine behind a Cloudflare free tier?

Eh, how would that even work? You have to serve the requests anyway.

Re:Icanhazip: A simple IP address tool survived a deluge of ... by ChrisClark on Monday July 31, 2023 @06:23PM (#36949694)
For $8.