from Hacker News

Ask HN: Any WAF service that doesn't charge per number of domains?

by going_to_800 on 1/4/21, 7:56 PM with 7 comments

We're a SaaS company where our users set a CNAME on their DNS to point to us so they can use their own domain for their links(for branding). There are a few hundred domains, but all point to the same IP and the total traffic is very low (below 10 GB/month).

Cloudflare is asking to buy their $5,000/month Enterprise plan, Stackpath quoted over $2,500/month, Fastly charges $20/domain, AppTrana charges for domains as well, Akamai is also super expensive.

Why everyone is charging per domains? Seems that don't care if there's no traffic on that domain or if the domain is pointed to the same origin.

Is there any WAF service not charging based on how many domains we have?

  • by mritzmann on 1/12/21, 3:42 PM

    Own WAF with ModSecurity and DDoS Protection on Layer 7? Something like Cloudflare Magic Transit. But every bigger DDoS Protection Service habe some sort of Layer 7 Product for Enterprise.

  • by kmos17 on 1/4/21, 10:25 PM

    Stackpath has a pretty solid WAF at very affordable cost with no per domain cost (last time I set it up for a client at least, I am not affiliated to them so not sure that’s still the case.) Always surprised I rarely see them mentioned, Cloudflare for a similar feature set was vastly more expensive when we did a cost comparison.

  • by floatingatoll on 1/4/21, 8:15 PM

    What is the median price charged to your users for a single instance of 'a CNAME on their DNS to point to us'?