Ask HN: Any WAF service that doesn't charge per number of domains?

1 points by going_to_800 5 years ago | 7 comments

We're a SaaS company where our users set a CNAME on their DNS to point to us so they can use their own domain for their links(for branding). There are a few hundred domains, but all point to the same IP and the total traffic is very low (below 10 GB/month).

Cloudflare is asking to buy their $5,000/month Enterprise plan, Stackpath quoted over $2,500/month, Fastly charges $20/domain, AppTrana charges for domains as well, Akamai is also super expensive.

Why everyone is charging per domains? Seems that don't care if there's no traffic on that domain or if the domain is pointed to the same origin.

Is there any WAF service not charging based on how many domains we have?

mritzmann 5 years ago |

Own WAF with ModSecurity and DDoS Protection on Layer 7? Something like Cloudflare Magic Transit. But every bigger DDoS Protection Service habe some sort of Layer 7 Product for Enterprise.

kmos17 5 years ago |

Stackpath has a pretty solid WAF at very affordable cost with no per domain cost (last time I set it up for a client at least, I am not affiliated to them so not sure that’s still the case.) Always surprised I rarely see them mentioned, Cloudflare for a similar feature set was vastly more expensive when we did a cost comparison.

going_to_800 5 years ago | |

Stackpath dissapointed us heavily. We thought this as well, bought a subscription to test it and talked with their support telling 500 websites cost $500/month. We spent time setting this up and when we asked a second support person, they said for over 100 websites we need to buy their $2000/month package.

Nowhere in their pricing page shows this and support reps don't even know their pricing clearly. We ended up wasting time with them.

kmos17 5 years ago | | |

Good to know. We only had about 20 domains to setup, so we didn’t hit any numbers like that.

floatingatoll 5 years ago |

What is the median price charged to your users for a single instance of 'a CNAME on their DNS to point to us'?

going_to_800 5 years ago | |

nothing, accounts are free. We use caddy server that generates the SSL certs automatically, but we want a WAF on top of that

floatingatoll 5 years ago | | |

I don't think you're charging enough to afford a WAF.