Ask HN: Any WAF service that doesn't charge per number of domains?

1 pointsgoing_to_8005y ago7 comments

We're a SaaS company where our users set a CNAME on their DNS to point to us so they can use their own domain for their links(for branding). There are a few hundred domains, but all point to the same IP and the total traffic is very low (below 10 GB/month).

Cloudflare is asking to buy their $5,000/month Enterprise plan, Stackpath quoted over $2,500/month, Fastly charges $20/domain, AppTrana charges for domains as well, Akamai is also super expensive.

Why everyone is charging per domains? Seems that don't care if there's no traffic on that domain or if the domain is pointed to the same origin.

Is there any WAF service not charging based on how many domains we have?

7 comments

mritzmann5y ago

Own WAF with ModSecurity and DDoS Protection on Layer 7? Something like Cloudflare Magic Transit. But every bigger DDoS Protection Service habe some sort of Layer 7 Product for Enterprise.

kmos175y ago

Stackpath has a pretty solid WAF at very affordable cost with no per domain cost (last time I set it up for a client at least, I am not affiliated to them so not sure that’s still the case.) Always surprised I rarely see them mentioned, Cloudflare for a similar feature set was vastly more expensive when we did a cost comparison.

going_to_800OP5y ago

Stackpath dissapointed us heavily. We thought this as well, bought a subscription to test it and talked with their support telling 500 websites cost $500/month. We spent time setting this up and when we asked a second support person, they said for over 100 websites we need to buy their $2000/month package.

Nowhere in their pricing page shows this and support reps don't even know their pricing clearly. We ended up wasting time with them.

kmos175y ago

Good to know. We only had about 20 domains to setup, so we didn’t hit any numbers like that.

floatingatoll5y ago

What is the median price charged to your users for a single instance of 'a CNAME on their DNS to point to us'?

going_to_800OP5y ago

nothing, accounts are free. We use caddy server that generates the SSL certs automatically, but we want a WAF on top of that

floatingatoll5y ago

I don't think you're charging enough to afford a WAF.

j / k navigate · click thread line to collapse

Ask HN: Any WAF service that doesn't charge per number of domains?

1 pointsgoing_to_8005y ago7 comments

Cloudflare is asking to buy their $5,000/month Enterprise plan, Stackpath quoted over $2,500/month, Fastly charges $20/domain, AppTrana charges for domains as well, Akamai is also super expensive.

Why everyone is charging per domains? Seems that don't care if there's no traffic on that domain or if the domain is pointed to the same origin.

Is there any WAF service not charging based on how many domains we have?

7 comments

mritzmann5y ago

Own WAF with ModSecurity and DDoS Protection on Layer 7? Something like Cloudflare Magic Transit. But every bigger DDoS Protection Service habe some sort of Layer 7 Product for Enterprise.

kmos175y ago

going_to_800OP5y ago

Nowhere in their pricing page shows this and support reps don't even know their pricing clearly. We ended up wasting time with them.

kmos175y ago

Good to know. We only had about 20 domains to setup, so we didn’t hit any numbers like that.

floatingatoll5y ago

What is the median price charged to your users for a single instance of 'a CNAME on their DNS to point to us'?

going_to_800OP5y ago

nothing, accounts are free. We use caddy server that generates the SSL certs automatically, but we want a WAF on top of that

floatingatoll5y ago

I don't think you're charging enough to afford a WAF.

j / k navigate · click thread line to collapse