Re:Netlify just sent me a $104K bill for a simple static site
by ssijak on Tuesday February 27, 2024 @01:55AM
(#39520928)
Put Cloudflare proxy in front of Netlify/Vercel deploys
[ Parent
| on HN ]
Re:Netlify just sent me a $104K bill for a simple static site
by tjosepo on Tuesday February 27, 2024 @02:16AM
(#39521068)
Every Netlify project is assigned a Netlify subdomain (i.e. `example.netlify.app`) that cannot be removed or proxied.
If anyone figures out what your Netlify subdomain is, it's my understanding that they can DDoS you and there's nothing you can do about it.
Re:Netlify just sent me a $104K bill for a simple static site
by spacemagic on Tuesday February 27, 2024 @03:53AM
(#39521734)
That makes sense, but is the Netlify subdomain visible from your custom domain? How would they be able to figure it out, other than humans leaking it somehow?
Re:Netlify just sent me a $104K bill for a simple static site
by tjosepo on Tuesday February 27, 2024 @11:02AM
(#39525655)
It should not be visible, but security-by-obscurity is not something that makes me sleep well at night.
It's a design limitation of Netlify that might cost you $100,000 some day.