Hacker News Reader

Comment by mastermedo | Hacker News Reader

I might be out of touch with reality, but billions of requests per month sounds like peanuts. Is that considered a big ddos attack?

View on HN

Depends who is paying for that? Self hosted that’s not a problem, but ‘serverless’ that’s usually costly at those levels, especially for worthless traffic.

Something like 300-400 API requests per second is not a heavy load for any reasonably designed API. Something like 300-400 static files requests per seconds is less than peanuts.

Your correct. 1 billion requests per month is 380 requests per second on average which is not that high

it's 2.3/second not 380

How are you arriving at that number?

60 seconds per minute 60 minutes per hour 24 hours per day 30 days per month ~2.59 million seconds per month

One billion requests into 2.59 million seconds is 386 requests per second.

Or 386K requests per seconds, depending on where these billions are coming from :-)

ho it's billion, my bad ahah

assuming they're smeared equally across the whole month, that is. Eg if the majority of those requests kick off a job at midnight on the first of the month, it's a bit more to deal with.

It depends on a lot of factors. Generally people provision infrastructure according to its expected usage, and to overprovision is wasteful.

I see, that makes sense. And automatic provisioning can be costly in instances like ddosing.

Reply on news.ycombinator.com