rpask.over-blog.com/
15 Février 2021
DigitalOcean vs. AWS is a David vs. Goliath story with a twist. The plucky upstart, DigitalOcean, faces an established behemoth. Like David, DigitalOcean has a strategy that plays to its strengths while avoiding a direct confrontation with Amazon. But this isn't a fight to the death. Amazon and AWS address the needs of different audiences, and knowing what each does well will help you choose between them.
$1.00 at Digital Ocean. Easily accessible. Offers excellent support for developers. Relatively limited support for operating systems other than Linux. Hacktoberfest ® is open to everyone in our global community. Whether you're a developer, student learning to code, event host, or company of any size, you can help drive growth of open source and make positive contributions to an ever-growing community.
DigitalOcean (spelled as one word; 'Digital Ocean' was a 90's-era manufacturer of wireless communications products) is a leading upstart cloud hosting provider. Launched in 2011, DigitalOcean focuses only on developers' needs, unlike Amazon's AWS with its everything-to-all-people approach. The company has data centers located in Amsterdam, Singapore, London, San Francisco, and New York. Early on, it received significant media coverage following pop megastar Beyonce's decision to host her album on their servers in 2013. Over the years, DigitalOcean saw explosive growth and attracted large sums of venture-capital funding.
DigitalOcean zeroes in on three main selling points to differentiate itself: pricing, high performance virtual machines, and simplicity. Their business model concentrates on giving developers a way to quickly start up affordable Linux instances called droplets. The most popular Linux distros are supported (Ubuntu, CentOS, Debian and Fedora), and with just one more click you can launch several applications – Ruby on Rails, a LAMP stack, Docker, Ghost, Wordpress, etc.
DigitalOcean's pricing is reputedly THE best among all cloud providers. Their prices are very affordable, even to very small developer setups. And what's more, they don't hit you with hidden charges for add-ons like more traffic and fixed IP addresses. Pricing starts at $0.007/hour or $5/month and they provide an easy slider to convert between hourly and monthly pricing.
DigitalOcean also prides itself on offering only high-performance machines. All disk drives are SSD, network speed is 1Gbps, and droplet startup time is just 55 seconds (compared to 1-3 minutes for other large cloud providers). Independent performance tests place DigitalOcean nodes at or near the top of performance tests, far above Amazon machines. https://truexup781.weebly.com/can-you-get-sims-4-on-steam.html.
Lastly, DigitalOcean offers a simple, user friendly, uncomplicated setup. It is targeted at developers and only offers machines running some version of the Linux operating system (for now) and related services – a virtual machine and DNS management. Over time it has expanded the class of products to include amenities like load-balancing, analytics, configuration management, hosted databases and so on. DigitalOcean still functions true to its DNA as a bare-bones IaaS provider for Linux developers, and they aren't ashamed to say so. From an early review of their services: 'The services they provide are quite basic - you get VPS's in the cloud and DNS management, that's all. No fancy load balancing, hosted databases, Hadoop clusters, etc. Compared to AWS, for example this could be seen as a disadvantage, but don't judge just yet.'
In stark contrast to DigitalOcean is Amazon; the 'Colossus of Cloud Computing.' Amazon is a monster truck in a lot full of Minis. Amazon's AWS is the market leader by far; in fact it is estimated that Amazon has as much computing capacity as the next 11 competitors on the list combined.
Amazon's AWS is really an umbrella offering consisting of a bewildering array of various branded IaaS and PaaS solutions. The largest and best-known of these is the EC2 IaaS solution.
Others are:
Amazon owns the largest data centers in the world. Separate data centers have been built in China to service that market exclusively. These are completely isolated from the others to placate Chinese concerns about US government spying, which have of course been heightened (legitimized!) following the Edward Snowden and Wikileaks revelations. In 2013 Amazon also won a coveted contract to create GovCloud which is a private cloud for the U.S. government. In response to Amazon's dominance in the cloud platform space, we've created a 2-part post on implementing GuardRail with Amazon AWS EC2, so be sure to check it out as well.
Of course, DigitalOcean does not even begin to compete with Amazon in terms of breadth of features. If there is an area of competition, it is against EC2, but even here DigitalOcean's capacity is about 1% that of EC2. Amazon's is much more concerned about the other large players – Google's AppEngine and Microsoft's Azure.
Even with DigitalOcean's now-legendary low prices Amazon will not be outdone. The giant has been involved in a vicious price war, not really with DigitalOcean, but against the likes of Google and Microsoft. This has resulted in 44 price reductions in the last 2 years alone, to the delight of cloud-services customers.
As one would expect for the world leader in cloud services, AWS operates the largest and most extensive network of cloud data centers worldwide. The cloud provider has continued to introduce new regions to support the needs of its global customer base. Now, AWS has the following regions and locations:
DigitalOcean, while having a smaller footprint of data centers, has a network of data centers spanning the globe too. These are the regions it has on offer:
An important distinction here is that AWS now offers servers in the China region, AWS China (Beijing) and AWS China (Ningxia),which, due to Chinese regulations, are offered by AWS's Chinese partners. If you are operating products to serve the Chinese market, this may make a crucial difference in which service you go with.
In terms of service offerings and products, AWS is the 800 pound gorilla of the cloud computing space. It has a product suite as extensive as any in the space, rivalled only by Microsoft Azure, but then, DigitalOcean has been quietly expanding its own suite of products. However, with DigitalOcean's strategy being focused more on developers and smaller businesses, they don't actually need to offer the full suite that AWS offers.
For AWS, these are some of the biggest and most heavily used products, out of all the numerous ones on offer:
Its product offerings might be less extensive, but DigitalOcean has the essentials covered for small and medium sized businesses. Still, just about everything DigitalOcean offers can be found on AWS. Here are some of DigitalOcean's biggest products:
While DigitalOcean's product range has expanded beyond what it offered a few years ago, the difference in revenue with AWS juxtaposes the two perfectly. DigitalOcean has scaled beyond $250 million in annual revenue, whereas AWS now does $9 billion a quarter, which translates to annual revenue of around $36 billion. That's several magnitudes of difference.
In line with its value proposition of making cloud computing simpler for small businesses, DigitalOcean keeps its pricing simple as well. While it quotes an hourly rate for its Droplets, there's a simple, predictable monthly price, which makes planning and budgeting much simpler. AWS goes strictly with a pay-as-you-go approach for its more than 160 products and services. Notably, you can make your AWS costs more predictable and save money by using reserved capacity rather than pay as you go, while Amazon Lightsail has made available a simpler, more predictably priced way to leverage AWS for small apps. Reserved capacity involves an upfront payment for your virtual server, with the potential to save as much as 75% compared to what you would pay with provisioning your EC2 instance on a pay-as-you-go plan.
DigitalOcean's pricing for Droplets and other services lets you see ahead of time how much you will end up paying. For example, a 1GB RAM Droplet with 25 GB SSD disk capacity will cost $5/month. This comes out to $0.007/hr, which is a significantly lower price than the comparable AWS EC2 t2.micro cloud server which has a pay as you go cost of $0.0116/hr. This general trend applies to a lot of the two competitors' product offerings, with DigitalOcean generally costing less for equivalent or comparable cloud computing capacity.
While both AWS and DigitalOcean have transparent pricing, AWS prices have tended to be opaque and seemingly mysterious in the past. This has made price to be a common FAQ for people considering AWS services. The difference with DigitalOcean is that the latter is upfront and clear about how much you end up paying on a monthly basis, the better to suit small businesses' budgeting and planning needs.
It also doesn't hurt that DigitalOcean has a pricing edge over AWS for most of their overlapping products. For AWS, the complexity of the ecosystem means that the target buyers, large enterprises with complex requirements, might prefer to stay in the AWS ecosystem to manage all their cloud computing and web hosting needs rather than go strictly on price. Large enterprise customers of AWS have included Apple and PayPal, among others, though DigitalOcean has some big names using it too.
Wifi explorer ios. In a notable performance benchmark study, DigitalOcean came out with superior performance per dollar spent. The study compared VM performance at comparable levels of spend across major cloud providers. DigitalOcean had higher CPU performance per dollar, almost 40% higher than AWS and more than 50% higher than Google Cloud.
In terms of application scalability, there is little to choose between DigitalOcean and AWS. Both can scale an application to billions of requests, no problem. The much bigger difference is in the size of the ecosystem and complementary services, reflecting the differing needs of the two platforms' customers.
Scaling your application on AWS is relatively straightforward, with numerous complementary technologies that allow your web application to handle massive amounts of traffic and serve a global audience. As your traffic grows, for example, you will need a CDN to handle images and video content delivery. AWS has the Amazon CloudFront service for this purpose.
When you need read replicas for your database, AWS RDS is there with 5 read replicas, with Amazon Aurora offering 15 of them. Amazon Aurora Serverless comes with autoscaling support. As requests and database writes increase, you might need to implement a message queue to take care of asynchronous messages. Amazon Simple Queue Service provides a scalable message queue that grows with your application. To cover your caching needs, you can use Amazon Elastic Cache. Your options for scaling on AWS technology are nearly endless, all the way to using Amazon EC2 Auto Scaling to dynamically add more compute capacity to meet escalating demand for your applications.
While working in an ecosystem with less bells and whistles, apps hosted on DigitalOcean can scale just as well as any AWS solution, and likely do it with greater simplicity too. While DigitalOcean aims for simplicity, it remains tremendously flexible, leaving room for your expert devops teams and developers to architect a setup that's optimal for your applications. DigitalOcean's API and CLI tools help you dynamically add Droplets to handle traffic to your application. A typical approach might have front end nodes backed with a smaller number of data storage nodes. The DigitalOcean 'Resize' feature lets you add capacity and compute power to your Droplets, however, to really scale your application elegantly, you will want to add nodes, something you can do via the DigitalOcean API.
You can have rules in place to ensure that in peak load times, nodes are automatically created and added to the worker pool for your application. DigitalOcean Load Balancers are available for $10/month, which balance traffic between your Droplets, ensuring that your services stay online even when experiencing a high load. Droplet backups are also available, with a predictable cost of an additional 20% of the cost of the Droplet.
For enterprises, and even smaller businesses, getting support can be crucial for ensuring the success of your cloud deployment, and fixing issues to ensure quick recovery. DigitalOcean has developed a stellar reputation in this regard. It officially offers three tiers of support:
AWS clients also get Basic Support for free, with the option to upgrade to a paid support plan. Paid support plans come in the following three tiers:
Besides paid support, both AWS and DigitalOcean make users' lives easier with managed services and, in the case of DigitalOcean, a Marketplace for 1-ClickApps. AWS, however, has a much bigger suite of managed services, offered under the AWS Managed Services product line.
Making your actual pick between DigitalOcean and AWS should be straightforward if you understand who these two competitors have optimized their platforms for. If you are a large enterprise that needs the full bells and whistles all on one ecosystem, DigitalOcean can still work for you, but you won't be their ideal target user and will, therefore, encounter much more friction. The same thing applies if you are a small startup looking for a simple solution and you choose to play in the AWS ecosystem, which is just not optimized for you because it's meant to address every single line in a large enterprise's cloud computing needs, with the unavoidable complexity that entails.
Among AWS's biggest advantages are its role as the undisputed leader in the cloud computing market and global presence in at least 36 availability zones and over 50 edge locations. The reliability of AWS is text-book class, with its position as market leader enabling it to provide customers with the latest innovations ahead of the general market. Its weaknesses, however, include general complexity as well as costs that can be not only hard to unpack for platform users, but hard to plan for as well.
DigitalOcean, on the other hand, is a more nimble and lean platform, with strong emphasis on simplicity for the end user. It has focused on its target market of developers and small businesses well, with simple UI and a low complexity approach that makes it possible for small, understaffed, devops teams to manage their infrastructure as well as any large enterprise. DigitalOcean's focus on smaller businesses means that it has not build the exhaustive product inventory that would meet all the needs of a very large enterprise. As such, there's an entire class of large cloud customers who, if they want a single ecosystem for their cloud, DigitalOcean will consistently lose out to the likes of AWS and Microsoft Azure.
DigitalOcean is not really an Amazon competitor. Its target market is small developers and small businesses who need to quickly start up a small high-performance instance. Still, Amazon is getting shown up by the scrappy contender when it comes to VM performance on the two platforms. DigitalOcean also gives the user a clean, easy-to-use interface with fewer features and one-click deployments. Amazon, on the other hand, offers a IaaS/ PaaS cloud supermarket where you can pick nearly any cloud service you could possibly want, and some that you didn't even know existed, such as mobile analytics and cloud workflows.
For more comparisons of leading cloud service providers, check out our cloud service provider roundup or brave the tarpits of securing AWS automatically.
Two of the most disruptive and widely-received spam email campaigns over the past few months — including an ongoing sextortion email scam and a bomb threat hoax that shut down dozens of schools, businesses and government buildings late last year — were made possible thanks to an authentication weakness at GoDaddy.com, the world's largest domain name registrar, KrebsOnSecurity has learned.
Perhaps more worryingly, experts warn this same weakness that let spammers hijack domains tied to GoDaddy also affects a great many other major Internet service providers, and is actively being abused to launch phishing and malware attacks which leverage dormant Web site names currently owned and controlled by some of the world's most trusted corporate names and brands.
In July 2018, email users around the world began complaining of receiving spam which began with a password the recipient used at some point in the past and threatened to release embarrassing videos of the recipient unless a bitcoin ransom was paid. On December 13, 2018, a similarly large spam campaign was blasted out, threatening that someone had planted bombs within the recipient's building that would be detonated unless a hefty bitcoin ransom was paid by the end of the business day. https://coolufiles689.weebly.com/bovada-casino-code-free-chips-2018.html.
Experts at Cisco Talos and other security firms quickly drew parallels between the two mass spam campaigns, pointing to a significant overlap in Russia-based Internet addresses used to send the junk emails. Yet one aspect of these seemingly related campaigns that has been largely overlooked is the degree to which each achieved an unusually high rate of delivery to recipients.
Large-scale spam campaigns often are conducted using newly-registered or hacked email addresses, and/or throwaway domains. The trouble is, spam sent from these assets is trivial to block because anti-spam and security systems tend to discard or mark as spam any messages that appear to come from addresses which have no known history or reputation attached to them.
However, in both the sextortion and bomb threat spam campaigns, the vast majority of the email was being sent through Web site names that had already existed for some time, and indeed even had a trusted reputation. Not only that, new research showsmany of these domains were registered long ago and are still owned by dozens of Fortune 500 and Fortune 1000 companies.
That's according to Ron Guilmette, a dogged anti-spam researcher. Researching the history and reputation of thousands of Web site names used in each of the extortionist spam campaigns, Guilmette made a startling discovery: Virtually all of them had at one time received service from GoDaddy.com, a Scottsdale, Ariz. based domain name registrar and hosting provider.
Guilmette told KrebsOnSecurity he initially considered the possibility that GoDaddy had been hacked, or that thousands of the registrar's customers perhaps had their GoDaddy usernames and passwords stolen.
But as he began digging deeper, Guilmette came to the conclusion that the spammers were exploiting an obscure — albeit widespread — weakness among hosting companies, cloud providers and domain registrars that was first publicly detailed in 2016.
In August 2016, security researcher Matthew Bryant wrote about a weakness that could be used to hijack email service for 20,000 established domain names at a U.S. based hosting provider. Ithoughtsx (mindmap) 5 7. A few months later, Bryant warned that the same technique could be leveraged to send spam from more than 120,000 trusted domains across multiple providers. And Guilmette says he now believes the attack method detailed by Bryant also explains what's going on in the more recent sextortion and bomb threat spams.
Grasping the true breadth of Bryant's prescient discovery requires a brief and simplified primer on how Web sites work. Your Web browser knows how to find a Web site name like example.com thanks to the global Domain Name System (DNS), which serves as a kind of phone book for the Internet by translating human-friendly Web site names (example.com) into numeric Internet address that are easier for computers to manage.
When someone wants to register a domain at a registrar like GoDaddy, the registrar will typically provide two sets of DNS records that the customer then needs to assign to his domain. Those records are crucial because they allow Web browsers to figure out the Internet address of the hosting provider that's serving that Web site domain. Like many other registrars, GoDaddy lets new customers use their managed DNS services for free for a period of time (in GoDaddy's case it's 30 days), after which time customers must pay for the service.
The crux of Bryant's discovery was that the spammers in those 2016 campaigns learned that countless hosting firms and registrars would allow anyone to add a domain to their account without ever validating that the person requesting the change actually owned the domain. Here's what Bryant wrote about the threat back in 2016:
'In addition to the hijacked domains often having past history and a long age, they also have WHOIS information which points to real people unrelated to the person carrying out the attack. Now if an attacker launches a malware campaign using these domains, it will be harder to pinpoint who/what is carrying out the attack since the domains would all appear to be just regular domains with no observable pattern other than the fact that they all use cloud DNS. It's an attacker's dream, troublesome attribution and an endless number of names to use for malicious campaigns.'
For a more concrete example of what's going on here, we'll look at just one of the 4,000+ domains that Guilmette found were used in the Dec. 13, 2018 bomb threat hoax. Virtualfirefox.com is a domain registered via GoDaddy in 2013 and currently owned by The Mozilla Corporation, a wholly owned subsidiary of the Mozilla Foundation — the makers of the popular Firefox Web browser.
The domain's registration has been renewed each year since its inception, but the domain itself has sat dormant for some time. When it was initially set up, it took advantage of two managed DNS servers assigned to it by GoDaddy — ns17.domaincontrol.com, and ns18.domaincontrol.com.
GoDaddy is a massive hosting provider, and it has more than 100 such DNS servers to serve the needs of its clients. To hijack this domain, the attackers in the December 2018 spam campaign needed only to have created a free account at GoDaddy that was assigned the exact same DNS servers handed out to Virtualfirefox.com (ns17.domaincontrol.com and ns18.domaincontrol.com). After that, the attackers simply claim ownership over the domain, and tell GoDaddy to allow the sending of email with that domain from an Internet address they control.
Mozilla spokesperson Ellen Canale said Mozilla took ownership of virtualfirefox.com in September 2017 after a trademark dispute, but that the DNS nameserver for the record was not reset until January of 2019.
https://downnfile902.weebly.com/vba-emulator-mac-download.html. 'This oversight created a state where the DNS pointed to a server controlled by a third party, leaving it vulnerable to misuse,' Canale said. 'We've reviewed the configuration of both our registrar and nameservers and have found no indication of misuse. In addition to addressing the immediate problem, we have reviewed the entire catalog of properties we own to ensure they are properly configured.'
According to both Guilmette and Bryant, this type of hijack is possible because GoDaddy — like many other managed DNS providers — does little to check whether someone with an existing account (free or otherwise) who is claiming ownership over a given domain actually controls that domain name.
https://downhup431.weebly.com/best-casino-wins.html. Contacted by KrebsOnSecurity, GoDaddy acknowledged the authentication weakness documented by Guilmette.
'After investigating the matter, our team confirmed that a threat actor(s) abused our DNS setup process,' the company said in an emailed statement.
'We've identified a fix and are taking corrective action immediately,' the statement continued. 'While those responsible were able to create DNS entries on dormant domains, at no time did account ownership change nor was customer information exposed.' Continue reading →
/image%2F6311793%2F20210221%2Fob_a6ee80_glyphs-2-1-dependable-and-intuitive-fo.png)
/image%2F6311793%2F20210221%2Fob_8dd8ad_enolsoft-pdf-creator-4-4-0-4.jpeg)
/image%2F6311793%2F20210221%2Fob_757f14_cisdem-pdf-converter-ocr-7-5-0-pdf.png)
/image%2F6311793%2F20210221%2Fob_344bf8_parallels-desktop-business-edition-15.jpeg)