Aliyun Certified Account Number: Architects Teach You Three Steps to Understand Aliyun's Consumption Details and Find out Hidden "Stealing Lamps and Oilers"
As an architect who is struggling with the cloud architecture every day, and also a webmaster who is in charge of dozens of independent stations and stares at Google traffic realization every day, what I am most afraid of seeing is not hacker attacks or search engine algorithm updates.
What I fear most is the Aliyun deduction text message that pops up in my mobile phone every month when I open my eyes.
"Dear users, hello: Up to now, your Aliyun account has suffered an abnormal deduction/deduction by amount......"
At this time, I believe 90% of the people are crazy in their hearts:
"Why? I obviously bought a fixed package with annual package and monthly package, why do I still deduct a few cents, a few dollars or even hundreds of dollars per day? Is Aliyun secretly pocketed my money?"
As a past person, I clearly tell you: Aliyun is such a big factory, it is really not necessary to deliberately deduct your three melons and two children in the bottom system.
The vast majority of inexplicable "abnormal deductions" are due to the fact that we accidentally checked some "hidden pay-as-you-go plug-ins" when configuring the architecture, or hackers targeted the server as a broiler.
Today, I will not talk to you about the professional death concepts of finance and accounting. I will use the most easy-to-understand "real-life writing style" to teach you how to use the "consumption details" and "bill dismantling" of ariyun console to find out those "stealing lamp oil women" who secretly eat your balance behind the scenes, and talk about how bill optimization secretly affects the SEO lifeblood of your website.
1. first step: Don't blindly complain! Two minutes to teach you to locate the "culprit of deduction"
When you find that the account balance is wrong or you receive a notice of deduction, don't blindly raise the work order to customer service like a headless fly. We have to learn to read the "bill details" by ourselves. The whole self-examination process only needs three mouse clicks:
Go straight to the user center: log on to the ariyun console, move the mouse to the small avatar in the upper right corner or the "cost" at the top, and click "bill" in the drop-down menu ".
Switch to Bill Details: After entering the expense center, find Bill Details in the left menu bar ". Remember, don't just look at the "monthly bill" of the total amount on the front page, which can't see anything.
Select the Details tab: On the bill details page, switch the upper tab to Details (not Summary). At the same time, change "Statistical Item" to "Billing Item".
Alibaba Cloud authentication account
This time, the truth came out! You'll see an extremely detailed list that clearly reads:
Which example, in which time period, because of which specific service, how much money was deducted.
2. architects knock on the blackboard: take stock of the "hidden deduction pit" that is most often stepped on"
Through the detailed query above, you will find that the major deduction is usually not your ECS server itself, but the following "hidden levels" that webmasters and start-up teams are most likely to step on ":
Deep pit one: snapshot (Snapshot) and mirror storage fees
Many webmasters have configured the server ECS with "automatic snapshot" for safety.
Policy "to back up the system disk and data disk at regular intervals every day.
Invisible pain point: Snapshots are charged according to the storage capacity and storage time. You thought it would be okay to buy a 50-dollar server, and as a result, 10 T snapshots of history were hung up in the background. These snapshots silently deduct your balance by a few cents per G every day in the background. Over time, the bill explodes directly.
Solution: If you see that the product is a cloud server ECS-snapshot in "Details", go to the snapshot page of the ECS console immediately, delete unnecessary old snapshots, or change the retention time of the automatic snapshot policy to a maximum of 3 or 5 days, and do not keep it permanently.
Deep pit 2: idle fee for cloud disk EIP (flexible public network IP)
Sometimes we temporarily apply for an elastic public network IP(EIP) and bind it to a pay-as-you-go server for testing or load balancing.
Invisible pain point: Aliyun has a very damaging but reasonable rule: when EIP is bound to a running server, only bandwidth fee/traffic fee is charged, and IP occupation fee is exempted; However, if you shut down the server or unbind the EIP, as long as you do not completely "release (Release)" the IP in the console, it will occupy public network resources, turn to an extremely expensive "volume idle fee" (a few cents an hour)!
Solution: If you see the flexible public network IP-retention fee in the bill details, immediately go to the network console to completely "release" those useless EIPs.
Deep Pit 3: Security Center (An Knight) and Payment after Vulnerability Repair
When buying a new server, many novices often accidentally check "cloud security center-pay-as-you-go protection" or "automated vulnerability repair plug-in" because they are too fast to create a page ".
Invisible pain point: usually do not deduct money, once your website is scanned by hackers one day, the security center will automatically help you intercept an attack, or automatically help you patch a Linux underlying vulnerability, the bill details will instantly pop up a "security service after payment".
Solution to breaking the situation: enter the cloud security center console, adjust the protection level to the free version, or turn off the automatic repair function and change it to manual repair.
3. a webmaster who is proficient in SEO: behind the abnormal bill, there may be a "SEO disaster" lurking on your website"
You may wonder:
"Blogger, I am a webmaster who is engaged in the realization of independent station traffic. What is the relationship between your security bill and my keyword ranking and traffic?"
The relationship is not only big, but also can directly influence your bank card deposit.
As a webmaster, if in the consumption details, suddenly found
Object Storage Service OSS traffic fee"
Or
"ECS Public Network outbound traffic fee (Pay-by-Traffic)"
There has been a surge without warning. This is definitely not Aliyun's mistake. This is the server sending it to you.
The highest level of security red alert
:
1. Your core images, videos and other assets have suffered.
Black production "malicious theft chain"
Some unwary colleagues used crawlers to collect all your high-quality articles and pictures, but they saved trouble and didn't even bother to change the links to the pictures. They directly quoted the original pictures of your Aliyun OSS on their websites.
Alibaba Cloud Certified Account
Devastating consequences: When his website gets traffic, every click will consume the public network outbound traffic in your Aliyun account. What you see in the bill details is the amount of arrears, and at the front end, if your account is automatically shut down by Aliyun due to arrears, the search engine spider (Googlebot) will report 502/504 errors when crawling.
Once the website frequently goes down for more than 24 hours, Google will think it is a dead station and will instantly recover your crawl budget (Crawl Budget), and the core keyword ranking will plummet.
2. Your server has been breached by hackers and has become a "letter broiler" or "CC attack source"
If the subsidiary bill shows that your ECS instance suddenly generates dozens of G's of "outbound traffic" at night, hackers have infiltrated the system along your exposed port 22 or insecure WordPress plug-ins.
SEO fatal injury: he is using your server IP to send spam to the world crazy, or in the background crazy scanning other people's site. This will cause your server IP to be instantly included in the global network security blacklist (Spamhaus, etc.).
Other search engine crawlers sharing this physical computer room will directly reduce the trust (Trustworthiness) of your domain name after identifying the blacklist IP, and the white hat SEO results that have been painstakingly managed for several years will be instantly wasted.
4. architect's exclusive cost reduction secret: how to make ariyun reverse "save you money"?
Now that we have understood the details of the bill and caught the "lamp-stealing woman", we will then put a combination of punches on the financial structure to completely block the black hole of renewal by volume:
Fully implement the combination of "year-on-year and month-on-month" and "saving plan": for resident core businesses such as website gateways and databases that cannot be shut down 24 hours a day, honestly buy year-on-year and month-on-month. If you need to open a pay-as-you-go server to deal with the big push because of business flexibility, be sure to purchase a "universal commitment savings plan" at the cost center ". Using the hourly commitment model to offset the premium on volume instances, the actual expenditure can be cut directly by more than 40%.
OSS storage and traffic must purchase "resource packages": never let OSS go naked and charge by volume. Go to the Aliyun page to buy a "downlink traffic package" and "storage package". The cost can be reduced by 60% by using the discount price of the package year and month to offset the daily consumption.
Front line of defense: Configure anti-theft chain for OSS (Referer): Log in to the OSS console and turn on "anti-theft chain" in basic settings ". Only requests containing your legitimate domain name are allowed (e. g. *.y
ourdomain.com) can load the picture, and the request to the three-party collection site is directly returned to the 403. From the source to strangle traffic stolen brush, the risk of arrears downtime.
5. Summary and Chief Architect Reconciliation Checklist
Understanding the bill details is a required course for a qualified cloud computing architect, and it is also a life-saving skill for a refined operation webmaster. Cloud computing power is the same as tap water at home, which can be unscrewed, but if the water pipe leaks and you don't care, the bill at the end of the month will definitely make you painful.
Finally, to summarize for you a reconciliation list that must be checked at the console before leaving work today:
Alibaba Cloud Certified Account
[] Billing Item Filtering: Enter the bill details, switch to the "Details" tab, and sort by "Billing Item" to see who was the top three deduction yesterday.
[] Clean up idle assets: Go to the network console to check if there are any EIPs unbound but not completely released. Go to the cloud disk console to see if there are any useless snapshots left over several years ago.
[] Security reinforcement: Check whether the OSS resource package expires, whether the anti-theft chain is successfully opened, and turn off unnecessary post-paid security services decisively in the background.
Hold the initiative of cloud billing firmly in your own hands, and use the most economical and stable underlying infrastructure to guard every profit and long-term growth of your independent station. Log in to your Aliyun account now and start your "cleaning!
