Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I had this weird wondering once.

If I am using CloudFront as my CDN, I pay per requests made on my static files.

enter image description here

So here comes the wondering. Can one keep requesting the same file in a non-stop fashion (with a script or something), in order to make your bill high? It seems to me to be a pretty fair question, isn't it?

share|improve this question
up vote 8 down vote accepted

Sure -- it's called "Economic Denial of Sustainability". Not a huge amount you can do about it. Don't expect any CDN provider that bills by the byte to aggressively deploy any countermeasures, either, because it's in their interest to serve (and bill you for) as much traffic as possible.

share|improve this answer
Ok, well, I'll just hope it wont happen to me. Thanks! – Jonathan Rioux Mar 3 '12 at 4:44
@womble Such anti-abuse features could become a competitive advantage for a CDN that offers it, though. – ceejayoz Mar 13 '12 at 21:31
@ceejayoz: Feel free to start up a CDN that offers that. I strongly suspect that it isn't feasible to offer, except as an expensive value-added service. – womble Mar 14 '12 at 0:29
If CloudFlare can do CDN for free, presumably Amazon is able to block DOS attacks aimed at CloudFront endpoints. – ceejayoz Mar 14 '12 at 2:56

Take a look at CloudFlare -- I think it wouldn't be an issue with their CDN in place.

share|improve this answer
CloudFlare costs money for using HTTPS :( – Jonathan Rioux Mar 6 '12 at 12:50
Oh, you're right. But it's a fixed price, not based on usage isn't it? – DougN Mar 6 '12 at 16:05
Indeed DougN, but the monthly fees are too high for me :( – Jonathan Rioux Mar 6 '12 at 22:17
"CloudFlare costs money for using HTTPS :( – Jonathan Rioux Mar 6 at 12:50" CloudFlare and SSL: If you can't upgrade to Pro to pay for SSL, you can actually move the SSL to a subdomain (if possible) and mark that as something we don't proxy in your CloudFlare DNS settings. We'll alsolikely offer a cheaper option for SSL in the future. The drawback, of course, is that we wouldn't be placing the CloudFlare proxy on the SSL portions of the site. – damoncloudflare Mar 13 '12 at 21:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.