Networking And Content Delivery — enterprise stack.

Pricing & free-tier limitsAWS VPC: $0/mo for VPC/subnets/route tables. Paid add-ons: NAT Gateway $0.045/hr (~$32.85/mo) + $0.045/GB processed. VPC Peering $0.01/GB intra-region, $0.02/GB cross-region. GCP VPC: $0/mo, egress $0.12/GB internet, $0.01/GB intra-zone peering. Azure VNet: $0/mo, peering $0.01/GB. Free Tier: VPC/VNet itself unlimited free; NAT not free. Self-host vSwitch/Headscale $0.

Recommended$13/moSelectAWS VPCFreeFreeSelectAWS VPC Free / GCP VPC Free / Azure VNet FreeCheaperFreeSelectHetzner Cloud Networks (Free)Paid$13/moSelectAWS VPC + Transit Gateway

+ OtherSkip this

Pricing & free-tier limitsCloudflare Free: Unlimited zones & queries, unlimited records, 20 Page Rules free, Pro $20/mo (20 rules, WAF), Business $200/mo (100 rules, 100% uptime SLA), Enterprise $5000/mo+. Route53: $0.50/zone/mo first 25, $0.40/M queries first 1B, $0.20/M after + $0.50/healthcheck. Bunny DNS: $0.10/zone/mo min $1/mo, $0.20/M queries, 20 global PoPs. Free Tier: Cloudflare unlimited free forever. Route53 no free tier beyond 12mo trial.

RecommendedFreeSelectCloudflare DNS FreeFreeFreeSelectCloudflare DNS Free (Unlimited queries)Cheaper$0.10/moSelectBunny DNS $0.10/zone/mo + Hurricane Electric FreePaidPrice variesSelectAmazon Route 53

+ OtherSkip this

Pricing & free-tier limitsCloudflare Free: Unlimited BW, 330+ PoPs, Tiered Cache free. Pro $20/mo, Business $200/mo, Enterprise $5000/mo+. BunnyCDN: $1/mo min (storage), Volume tier $0.01/GB NA/EU, $0.03/GB APAC/SA, $0.01/GB extra Tier. Fastly: $50/mo min, $0.12/GB NA/EU first 10TB, $0.19/GB APAC, $0.015/10k requests. CloudFront: $0.085/GB first 10TB, $0.02/10k HTTPS req, $0.02/GB origin fetch. Free Tier: Cloudflare unlimited. CloudFront 1TB free/mo 12 mo, 10M requests. Overage: per GB/requests billed.

RecommendedFreeSelectCloudflare CDN Free (Unlimited BW)FreeFreeSelectCloudflare Free Unlimited BandwidthCheaper$1/moSelectBunnyCDN $1/mo + $0.01/GBPaid$50/moSelectFastly $50/mo min / CloudFront $0.085/GB

+ OtherSkip this

Pricing & free-tier limitsCloudflare Universal: Free unlimited certs with auto-renew, shared SAN. Pro $20/mo same. Business $200/mo custom upload. ACM Public: $0 free when attached to ALB/CloudFront/NLB/ApiGW. ACM Private CA: $400/mo per CA + $0.75/private cert, $0.10 for short-lived. Let's Encrypt: $0 free, 50 certs/domain/week limit, 90-day. ZeroSSL Free: 3 x 90-day free then $10/mo. Overage: Private CA billing hourly $0.55/hr.

RecommendedFreeSelectCloudflare Universal SSL (Free)FreeFreeSelectENLet's Encrypt Free (90-day) + Cloudflare Free SSLCheaper$10/moSelectZEZeroSSL Free 3 certs + Cloudflare ProPaid$400/moSelectAWS ACM Private CA $400/mo per CA

+ OtherSkip this

Pricing & free-tier limitsCloudflare LB Free: 1 LB included with health checks, $5/mo per extra LB, $0.50/M DNS queries for LB. Pro $20/mo same. ALB: $0.0225/hr (~$16.43/mo) + $0.008/LCU-hr (LCU = new conn/sec, active conn, proc bytes, rule evals). GCP L7 LB: $0.025/hr (~$18.25/mo) + $0.008/LCU-hr + $0.008/GB processed. Hetzner LB11: $5.83/mo flat incl 20TB traffic, LB21 $11.66/mo, LB31 $23.33/mo. Free Tier: Cloudflare 1 LB free forever.

RecommendedFreeSelectCloudflare Load Balancing Free 1 LBFreeFreeSelectCloudflare LB Free 1 LB + Caddy Self-HostCheaper$5.83/moSelectHetzner Cloud LB $5.83/mo (LB11)Paid$16.43/moSelectAWS ALB $0.0225/hr ~$16.43/mo + LCU

+ OtherSkip this

Pricing & free-tier limitsCloudflare Free: Unmetered DDoS mitigation L3/L4/L7 free, no cap. Pro $20/mo enhanced rules. Business $200/mo advanced analytics. Enterprise $5000/mo+ 100% uptime + 5 sec mitigation SLA. AWS Shield Standard free. Shield Advanced $3000/mo/org + $0.05/GB mitigated + AWS DRT. Fastly DDoS included $50/mo min. Bunny Perma-mitigation included free. Free Tier: Cloudflare unmetered free perpetual, best free DDoS on market.

RecommendedFreeSelectCloudflare DDoS Free (Unmetered)FreeFreeSelectCloudflare Free Unlimited L3/L4/L7 MitigationCheaperFree tierSelectBunnyCDN DDoS Included + StormWall Free TierPaid$3,000/moSelectAWS Shield Advanced $3000/mo

+ OtherSkip this

Pricing & free-tier limitsWorkers Free: 100k req/day, 10ms CPU, 128MB, 6* subrequests. Workers Paid $5/mo incl 10M req/mo ($0.50/M after), 30M CPU ms included + $0.02/M ms after, Workers KV extra. Workers Unbound: $5/mo same but 30 sec CPU. Fastly Compute: Free trial $50 credit, then $0.12/GB egress + $0.000015/req ($1.50/M). Lambda@Edge: $0.60/M requests + $0.00000625/GB-sec (128MB = $0.000050/100ms) + $0.085/GB egress. Free Tier: Workers Free forever 100k/day.

RecommendedFreeSelectCloudflare Workers Free 100k req/dayFreeFree trialSelectCloudflare Workers Free + Fastly Compute Free TrialCheaper$5/moSelectCloudflare Workers $5/mo (10M req included)Paid$5/moSelectFastly Compute + AWS Lambda@Edge $0.60/M + $0.00000625/GB-sec

+ OtherSkip this

Pricing & free-tier limitsTailscale Free: 100 devices, 3 users, 1 tailnet, unlimited traffic, MagicDNS, subnet routers. Personal Pro $6/mo 1 user 100 dev. Team $6/user/mo min 5 users. Business $18/user/mo (6mo audit logs, ACLs). Enterprise custom. ZeroTier Free 25 nodes free, $5/mo per extra 25, $15/mo Business. Netbird Cloud Free 100 peers 10 users. Netmaker Community self-host free. Overage: Device count hard limit free tier.

RecommendedFreeSelectTailscale Free 100 devices / 3 usersFreeFreeSelectTailscale Free + ZeroTier Free 25 nodes + Netbird Free 100 peersCheaper$0 / Headscale SelfSelectNENetmaker OSS Self-Host $0 / Headscale Self-HostPaid$10/moSelectTailscale Business $6/user/mo + ZeroTier $10/mo per 25 nodes

+ OtherSkip this

Pricing & free-tier limitsCloudflare Gateway Free: 50 users free, unlimited DNS queries, L7 filtering, category blocks, 24h log retention. Zero Trust Teams $7/user/mo seat min $7/mo includes 50GB Gateway logs, 30 days. Enterprise $ custom. NextDNS Free 300k queries/mo then $1.99/mo unlimited devices & unlimited queries + logs. Cisco Umbrella DNS $15/user/mo. Free Tier: Cloudflare 50 users free perpetual, best free DNS filtering.

RecommendedFreeSelectCloudflare Zero Trust Gateway Free 50 usersFreeFreeSelectCloudflare Gateway Free 50 users DNS filterCheaper$1.99/moSelectNENextDNS $1.99/mo unlimited devicesPaid$7/user/moSelectCloudflare Gateway Teams $7/user/mo

+ OtherSkip this

Pricing & free-tier limitsR2 Free: 10GB storage, 10M Class A ops (write), 10M Class B (read), zero egress fees (free BW to internet). Paid $0.015/GB/mo storage, $4.50/M Class A writes, $0.36/M Class B reads. Bunny Storage Edge SSD $0.02/GB/mo, HDD $0.01/GB/mo, $0.01/GB egress min $1/mo. S3 Standard: $0.023/GB/mo first 50TB, $0.09/GB egress first 10TB, $0.0004/1000 GET. Free Tier: R2 10GB forever free, Cloudflare cache unlimited egress free.

RecommendedFreeSelectCloudflare R2 Free 10GB + Edge CacheFreeFree trialSelectCloudflare R2 Free 10GB + Bunny Storage TrialCheaper$0.36/moSelectBunny Storage $0.01/GB/mo + $0.01/GB egressPaid$0.02/GB/moSelectAWS S3 Standard $0.023/GB/mo + $0.09/GB egress

+ OtherSkip this

Pricing & free-tier limitsCloudflare Free Analytics: 30-day retention, unlimited domains, Web Vitals, cache analytics, firewall events. GraphQL logs 7 days free. Grafana Cloud Free: 10k metrics series, 50GB logs/mo, 50GB traces, 3 users. Better Stack Free: 10 monitors 3-min checks, 100 status pages. Datadog NPM: $5/host/mo + $0.10/GB logs ingested. ThousandEyes $250/mo min. Free Tier: Cloudflare analytics free unlimited domains forever.

RecommendedFreeSelectCloudflare Analytics Free + Grafana Cloud FreeFreeFreeSelectCloudflare Web Analytics Free + Grafana Cloud Free 50GB logs + UptimeRobot FreeCheaper$5/moSelectBetter Stack Free 10 monitors + Grafana Cloud $8/moPaid$5/host/moSelectDatadog NPM $5/host/mo + Cloudflare Enterprise Logs $5k

+ OtherSkip this

Pricing & free-tier limitsCloudflare Free: 5 custom rules free, Managed OWASP limited (Free). Pro $20/mo 20 rules + Managed ruleset full + OWASP Core. Business $200/mo 100 custom + 25 managed rulesets. AWS WAF: $5/mo per WebACL + $1/mo per rule (up to 1500 WCUs) + $0.60/M requests processed (up to $6/M after). Fastly WAF $0.12/GB + $0.015/10k + managed rules $0.50/M. Free Tier: Cloudflare WAF 5 rules free forever. AWS no free tier.

RecommendedFreeSelectCloudflare WAF Free 5 Custom Rules + ManagedFreeFreeSelectCloudflare Free WAF Managed ruleset (basic)Cheaper$5/moSelectBunny WAF $9.99/mo per zone + Sucuri $9.99/moPaid$5/moSelectAWS WAF $5/mo per ACL + $1/rule/mo + $0.60/M req

+ OtherSkip this

Pricing & free-tier limitsCloudflare Free: 330+ global PoPs, anycast edge, unlimited anycast queries & bandwidth (same PoPs as Enterprise). Pro $20 same network. Fastly: 90+ PoPs, $50/mo min, $0.12/GB. Akamai Ion: $350/mo min $0.25/GB under 1TB, $0.125/GB after, Enterprise $2500/mo min. BunnyCDN: 115+ PoPs, $1/mo + $0.01/GB (EU/NA). Free Tier: Cloudflare unlimited anycast free forever.

RecommendedFreeSelectCloudflare Anycast Free 330+ PoPsFreeFreeSelectCloudflare Free Anycast 330+ PoPsCheaper$1/moSelectBunnyCDN 115+ PoPs $1/mo minPaid$50/moSelectFastly Anycast 90+ PoPs $50/mo min + Akamai Ion

+ OtherSkip this

Pricing & free-tier limitsCloudflare LB Free: 1 LB, geo/failover/weighted, 2 origins free, health checks 1-min interval, $5/mo per extra LB + $0.50/M LB queries + $1/check/mo. Route53 Failover: $0.50/zone + $0.40/M queries + $0.50/basic health check/mo ($0.75/faster 10s). NS1: $50/mo starter 1M queries + $75/mo traffic steering LB, $0.85/M after. Bunny: $1/mo per LB. Free Tier: Cloudflare 1 LB forever free.

RecommendedFreeSelectCloudflare Load Balancing Free 1 LB + FailoverFreeFreeSelectCloudflare LB Free + Route53 Failover (pay per query)Cheaper$0.85/moSelectBunny DNS LB $1/mo per LB + DNS Made Easy $45/yrPaid$50/moSelectRoute53 + Health Checks $0.50/check + NS1 $50/mo

+ OtherSkip this

Pricing & free-tier limitsTailscale MagicDNS: Free unlimited private DNS within tailnet 100 dev, split DNS, search domains. Route53 Private: $0.50/zone/mo + $0.40/M queries standard (same as public). Azure Private DNS: $0.50/zone/mo + $0.40/M queries. GCP Cloud DNS private: $0.50/zone/mo + $0.40/M. Cloudflare Gateway private resolver Free 50 users then $7/user/mo. Free Tier: MagicDNS free 100 dev perpetual.

RecommendedFreeSelectTailscale MagicDNS Free + Cloudflare Private DNSFreeFreeSelectTailscale MagicDNS Free 100 dev + Cloudflare Tunnel DNS $0Cheaper$0.50/moSelectCloudflare Zero Trust Private DNS $5/mo + $7/userPaid$0.50/moSelectRoute53 Private Hosted Zone $0.50/zone + Azure Private DNS

+ OtherSkip this

Pricing & free-tier limitsAWS Elastic IP: $0 when attached to running instance/NAT/GWLB, $0.005/hr ($3.60/mo) when idle. BYOIP $0 fee to bring /24+, $0.10/hr advertisement? Actually free. GCP Static IP $0 when in-use, $0.01/hr idle ($7.20/mo). Azure Public IP Basic free static dynamic $0? Standard $0.005/hr idle. Hetzner Floating IP free up to 3, Primary IP free with server. Cloudflare BYOIP: Enterprise $5500/mo min includes 1 /24 BYOIP, $5500/mo per extra prefix + Magic Transit $5000/mo required. Free Tier: In-use Elastic IPs free forever.

RecommendedFreeSelectAWS Elastic IP Free When In-UseFreeFreeSelectAWS Elastic IP free attached + Hetzner Primary IP FreeCheaper$3/moSelectVultr Reserved IP $3/mo + Hetzner Floating IP FreePaid$5,500/moSelectCloudflare BYOIP $5500/mo Enterprise + AWS BYOIP $0

+ OtherSkip this

Pricing & free-tier limitsAWS NAT GW: $0.045/hr (~$32.85/mo) + $0.045/GB processed + $0.09/GB internet egress. GCP Cloud NAT: $0/hr? Actually $0.045/hr per GW (~$32.85/mo) + $0.045/GB processed first 1TB. Azure NAT GW: $0.045/hr + $0.045/GB + $0.005/hr per public IP. Self-host: CX11 $3.29/mo + 20TB traffic, pfSense free. Free Tier: No free NAT GW; GCP $0 gateway in some regions? Self-host cheap $3.29.

Recommended$0.05/GBSelectGCP Cloud NAT Free GW + $0.045/GB + Self-HostFreeFreeSelectGCP Cloud NAT GW $0 (data only) + Hetzner NAT VM free via private netCheaper$3.29/moSelectSelf-Host NAT VM Hetzner CX11 $3.29/moPaid$32.85/moSelectAWS NAT Gateway $0.045/hr ~$32.85/mo + $0.045/GB

+ OtherSkip this

Pricing & free-tier limitsCloudflare API Shield Free: 100k API calls/day schema validation, discovery free, Pro $20/mo 500k, Business $200/mo 5M. AWS API GW: REST $3.50/M requests + $0.09/GB egress, HTTP API $1.00/M + $0.09/GB. GCP Apigee X PayG $4/M API calls. Kong Konnect Free 1 runtime, Plus $250/mo per node. Tyk OSS free self-host, Cloud $75/mo. Free Tier: Cloudflare API Shield Free 100k/day forever.

RecommendedFreeSelectCloudflare API Shield Free 100k + Kong OSS FreeFreeFreeSelectKong OSS Free + Cloudflare API Shield Free 100k calls/dayCheaper$20/moSelectTYTyk OSS Self-Host + Cloudflare API Shield $20/mo ProPaid$20/moSelectAWS API Gateway $3.50/M REST + $1/M HTTP API

+ OtherSkip this

Pricing & free-tier limitsCloudflare Health Checks: Linked to LB free 1 LB with health checks 1-min, $5/mo per extra monitor (60s), $0.50/M DNS checks. Route53: $0.50/mo per basic check 30s, $0.75/mo fast 10s, $1/mo HTTPS string match. UptimeRobot Free: 50 monitors 5-min interval free forever, Pro $8/mo 50x1-min. Better Stack Free: 10 monitors 3-min, 1 status page, $24/mo 30 monitors 30-sec + incident management. Free Tier: UptimeRobot 50 free forever.

RecommendedFreeSelectCloudflare Health Checks + UptimeRobot Free 50FreeFreeSelectUptimeRobot Free 50 monitors 5-min + Better Stack Free 10Cheaper$8/moSelectHEHetrix Tools Free 15 monitors + Better Stack $24/moPaid$250/moSelectRoute53 Health Checks $0.50/mo + ThousandEyes $250/mo

+ OtherSkip this

Pricing & free-tier limitsCloudflare: Free 1 LB incl weighted/latency/geo steering, $5/mo extra LB + $0.50/M LB queries. Route53 Traffic Flow: $50/mo per Traffic Policy (hosted records) + $0.50/zone + $0.40/M queries + $0.50/healthcheck + $100/mo Advanced Controls (arc). NS1: $50/mo starter 1M queries + $75/mo for traffic steering advanced, $50/mo Pulsar RUM steering, $0.85/M after 1M. Free Tier: Cloudflare 1 LB free perpetual.

Recommended$5/moSelectCloudflare Traffic Steering + Load BalancingFreeFreeSelectCloudflare LB Free Geo steering 1 LBCheaper$0.50/moSelectRoute53 Traffic Flow $50/mo per policy + $0.50/M queries (cheaper than NS1)Paid$50/moSelectNSNS1 Pulsar + Dyn Traffic Management $50/mo

+ OtherSkip this

Pricing & free-tier limitsAWS PrivateLink: $0.01/hr per interface endpoint (~$7.20/mo) + $0.01/GB data processed + $0.032/hr NAT? Interface $0.01. GCP PSC: $0.01/hr endpoint (~$7.44/mo) + $0.01/GB + $0.01/hr rule. Azure Private Link same $7.30/mo. Cloudflare Tunnel Free: Unlimited tunnels, unlimited bandwidth (fair use via WARP client), 50 users free Zero Trust, then $7/user/mo Teams. Tailscale App Connector Free 100 devices. Free Tier: Cloudflare Tunnel free unlimited forever.

RecommendedFreeSelectAWS PrivateLink + Cloudflare Tunnel FreeFreeFreeSelectCloudflare Tunnel Free Unlimited Tunnels + Tailscale App Connectors FreeCheaper$7.20/moSelectCloudflare Tunnel $0 free + Zero Trust Free 50 usersPaid$7.20/moSelectAWS PrivateLink $0.01/hr per Endpoint ~$7.20/mo + $0.01/GB

+ OtherSkip this

Pricing & free-tier limitsVPC Peering: $0 setup fee, data $0.01/GB same region AZ-AZ processed, $0.02/GB cross-region US. Transit Gateway: $0.05/hr per attachment (~$36.50/mo per VPC), $0.02/GB processed. GCP VPC peering $0 setup $0.01/GB egress. Azure VNet peering $0.01/GB same region, $0.02/GB cross-region. Cloudflare Magic WAN $5000/mo base includes transit-like fabric $0.10/GB + connector $5/mo. Free Tier: Peering free setup, only data charged. Tailscale mesh 100 dev free.

RecommendedFreeSelectAWS VPC Peering Free Setup + Transit GatewayFreeFreeSelectAWS VPC Peering $0 setup (pay data) + Tailscale mesh freeCheaperFreeSelectHetzner vSwitch Free + WireGuard Mesh self-host $0Paid$36/moSelectAWS Transit Gateway $0.05/hr attachment ~$36/mo + $0.02/GB

+ OtherSkip this

Pricing & free-tier limitsAWS VPN: $0.05/hr per Site-to-Site VPN connection (~$36.50/mo) + $0.09/GB egress + $0.02/GB accelerated? GCP Cloud VPN: $0.05/hr per tunnel (~$36.50) + $0.02/GB egress. Azure VPN Gateway Basic $0.04/hr (~$29/mo, 100 Mbps) VpnGw1 $0.19/hr (~$139/mo, 650 Mbps). Tailscale subnet router free 100 devices, $6/user/mo Pro. Algo VPN free self-host on $5 VPS. Free Tier: self-host + Tailscale 100 dev free.

RecommendedFreeSelectAWS Site-to-Site VPN + Tailscale Subnet Router FreeFreeFreeSelectALAlgo VPN self-host free + Tailscale subnet router free 100 devCheaper$3.29/moSelectHetzner CX11 StrongSwan/IPsec $3.29/mo self-hostPaid$36.50/moSelectAWS VPN Gateway $0.05/hr per conn ~$36.50/mo + $0.09/GB

+ OtherSkip this

Pricing & free-tier limitsAWS NLB: $0.0225/hr (~$16.43/mo) + $5.84 per NLCU-hr ($0.006 per NLCU, per LCU: 800 new flows/sec, 100k active, 1GB processed). GCP TCP/UDP LB: $0.025/hr (~$18.25/mo) + $0.008/GCU-hr + egress $0.12/GB. Azure LB Standard $0.025/hr + $0.005/GB processed + rule charges $0.001/hr. Hetzner LB11 $5.83/mo flat incl 20TB. Scaleway LB $6/mo + $24/yr after. Free Tier: none long-term except Hetzner self LB via HAProxy free $3.29.

Recommended$5.83/moSelectHetzner LB $5.83/mo + AWS NLB $0.0225/hrFreeFree trialSelectHetzner LB free trial + Caddy L4 self-host freeCheaper$0/moSelectHetzner LB11 $5.83/mo + Scaleway LB $6/moPaid$16.43/moSelectAWS NLB $0.0225/hr ~$16.43/mo + $0.006/NLCU-hr

+ OtherSkip this

Pricing & free-tier limitsCloudflare Tiered Cache: Free, Smart Tiered Caching free (reduces origin 70%). Argo Smart Routing $5/mo + $0.10/GB smart routing. Fastly Origin Shield: Adds $0.10/GB to shield fetch, $50/mo min platform, 1 shield POP free per service. CloudFront Origin Shield: $0.015/GB extra incurred in shield region (us-east-1 etc) on top of $0.085/GB egress. Bunny: Shield PoP $9.99/mo zone + $0.02/GB extra. Free Tier: Cloudflare Tiered Cache free forever best ratio.

RecommendedFreeSelectCloudflare Tiered Cache Free + Argo TieredFreeFreeSelectCloudflare Tiered Cache Free (Smart Tiered Caching)Cheaper$5/moSelectBunnyCDN Origin Shield $9.99/mo + $0.02/GB shieldPaid$5/moSelectFastly Origin Shield $0.10/GB + CloudFront Origin Shield $0.015/GB

+ OtherSkip this

Pricing & free-tier limitsCloudflare Pro $20/mo includes Polish lossy/lossless WebP + Mirage. Images: $5/mo includes 100k stored images, $1/100k delivered, resizing $9/mo for 50k resizing req, $3 per extra 50k, $0.20/1000 transforms? Fastly Image Optimizer: $0.0075/req transformed + $0.12/GB bandwidth + $50/mo min. Bunny Optimizer: $9.99/mo includes min 100GB BW + 2M transformations, after $0.01/1000. Imgix $75/mo 15k originals + $0.08/1000 renditions. Free Tier: Cloudflare Polish on $20 Pro, free transforms trial 500/mo.

Recommended$5/moSelectCloudflare Polish + Images $5/mo (100k) + ResizingFree+$20 onceSelectCloudflare Polish free on Pro ($20) + Bunny Optimizer trialCheaper$9/moSelectBunny Optimizer $9.99/mo 2M images + Cloudflare ProPaid$9/moSelectCloudflare Images $5/mo + Image Resizing $9/mo per 50k + Fastly IO

+ OtherSkip this

Pricing & free-tier limitsCloudflare mTLS: Free 2 client CAs with Access 50 users, $10/mo per 100 client certs after? Actually Access $7/user/mo includes unlimited client certs + revocation. Enterprise $5000 includes. AWS ALB mTLS: ALB $0.0225/hr + trust store $0.15/hr (~$109.50/mo per store) + LCU $0.008. API Gateway mTLS $3.50/M + trust store $0.15/hr. smallstep CA self-host free open-source. GCP Client Auth LB free? $0.025/hr. Free Tier: Cloudflare 2 certs forever.

RecommendedFreeSelectCloudflare mTLS Free 2 certs + Zero Trust AccessFreeFreeSelectCloudflare Access mTLS Free 50 users 2 certs + smallstep self-host freeCheaper$7/user/mo unlimited mTLSSelectCloudflare Zero Trust $7/user/mo unlimited mTLSPaid$5,000/moSelectAWS ALB mTLS $0.0225/hr + $0.15/hr trust store + API Gateway mTLS

+ OtherSkip this

Pricing & free-tier limitsCloudflare Logpush to R2: Free (R2 storage $0.015/GB/mo), to S3/HTTP $0.12/GB log volume? Actually free to R2, $0.10/GB to external? Workers Logpush $5/mo. CloudFront Real-time: $0.03 per million log lines + $0.09/GB delivery to Kinesis/S3. Fastly Real-time Logging $0.01/10k lines ( $1/M) + $0.12/GB syslog destination. Datadog Log Ingest $0.10/GB ingested + $1.70/M scanned + retention $0.02/GB-month. Grafana Loki Free 50GB/mo logs included. Free Tier: Cloudflare→R2 free 10GB storage perpetual.

RecommendedFreeSelectCloudflare Logpush Free to R2 + Grafana Loki FreeFreeFreeSelectCloudflare Logpush to R2 Free + Bunny Log Streaming FreeCheaper$0.50/GBSelectBetter Stack Logs $0.50/GB + Grafana Loki Free 50GBPaid$1/moSelectAWS CloudFront Real-time Logs $0.03/M lines + Datadog $0.10/GB

+ OtherSkip this

Pricing & free-tier limitsCloudflare Rate Limiting Free: 1 rule, 10 sec period, 1200 sec timeout free. Advanced Rate Limiting $5/mo for 10k good req? Pro includes $5/mo 100k good, $10/mo 500k? Actually Pricing: $5/mo for 100k good requests counted, $0.05/10k after. Bot Management: Free basic on Free plan, Pro includes more, Business $200/mo includes advanced bot + scoring, Enterprise Bot Management $2000/mo add-on + Super Bot Fight Mode free. AWS WAF Rate-Based: $5/ACL + $1/rule + $0.60/M requests. Free Tier: 1 rate rule free forever, Turnstile CAPTCHA free unlimited.

RecommendedFreeSelectCloudflare Rate Limiting Free 1 rule + Bot BasicFreeFreeSelectCloudflare Rate Limiting 1 rule free + Turnstile Free unlimitedCheaper$5/moSelectCloudflare Pro Advanced Rate Limiting $5/mo per 100k good requestsPaid$200/moSelectCloudflare Bot Management $200/mo Business + AWS WAF Rate-Based

+ OtherSkip this

Pricing & free-tier limitsCloudflare LB Multi-CDN: Free 1 origin pool, $5/mo per extra LB origin groups, $0.50/M LB queries. Cedexis (Citrix ITM) Free Community 5M RPM then $500/mo Lite 50M, $1500 Enterprise. Mlytics Pro $999/mo includes 500TB aggregated + real-time switching + reports. Akamai Multi-CDN $2500/mo min. Fastly + Cedexis switching custom pricing $50/mo min per CDN. Free Tier: Cloudflare 1 multi-origin free perpetual.

RecommendedFreeSelectCloudflare LB Multi-CDN Origin Failover + Cedexis FreeFreeFreeSelectCloudflare LB Multi-Origin Free 1 LB + Open-MultiCDN OSS + Cedexis Community FreeCheaper$1/moSelectBunny Multi-CDN $1/mo per CDN Origin + Cedexis FreePaid$999/moSelectMLMlytics Multi-CDN Enterprise $999/mo + Fastly Multi-CDN orchestration

+ OtherSkip this

Pricing & free-tier limitsAWS DX Dedicated 1 Gbps: $0.30/hr (~$219/mo per port) + $0.02/GB egress DX (vs $0.09 internet). Hosted 500Mbps $0.07/hr (~$51/mo) + $0.02/GB. 10 Gbps $2.25/hr (~$1642/mo) + $0.02/GB. Azure ExpressRoute: Standard 1 Gbps $0.49/hr (~$357/mo) + $0.02/GB egress + Premium $0.75/hr + unlimited? $100/mo Local. GCP Interconnect 10 Gbps $1.70/hr (~$1241/mo) + $0.02/GB. PacketFabric Hosted $100/mo 1 Gbps VXC + $0.04/GB. Free Tier: No free, minimum 1mo commit. LAG 10 Gbps $0.075/hr extra.

Recommended$0.30/moSelectAWS Direct Connect 1Gbps $0.30/hr port $0.02/GBFreeNo free optionSelectNONone (Physical port) - Tailscale WAN free as logical alternativeCheaper$1.70/moSelectPAPacketFabric Hosted VXC $100/mo + Equinix Metal Hosted ConnectionPaid$2.25/moSelectAWS Direct Connect Dedicated 1Gbps/10Gbps + Azure ExpressRoute

+ OtherSkip this

Pricing & free-tier limitsAWS Cloud WAN: $0.05/hr per attachment (~$36.50/mo per VPC/transit/branch), Core Network Edge $0.30/hr (~$219/mo per edge) + $0.02/GB processed across CNE. Magic WAN: Enterprise $5000/mo base includes 10 tunnels, 50 CIDRs, $5/mo per extra connector (Anycast GRE/IPsec), $0.10/GB data. Cato SASE: $60/site/mo 100Mbps + $8/user/mo + $0.15/GB. Cradlepoint NetCloud $120/site. Free Tier: Tailscale 100 dev free global fabric. Cloudflare 10 connectors free in Enterprise trial.

Recommended$0.05/moSelectAWS Cloud WAN $0.05/hr per attachment + Cloudflare Magic WAN $5000/moFreeFreeSelectTailscale Free 100 dev Global WAN mesh + ZeroTier Global Fabric FreeCheaper$0.05/moSelectCloudflare Magic WAN $5/mo per connector (10 free) + Tailscale $6/userPaid$60/moSelectAWS Cloud WAN + Cloudflare Magic WAN Enterprise + Cato $60/site/mo

+ OtherSkip this

Pricing & free-tier limitsMagic Transit: $5000/mo base 10 Gbps clean + mitigation unlimited, 20 Gbps typical clean, $500/mo per extra 1 Gbps sustained + BYOIP $5500/mo per /24 + $5000/mo Magic WAN bundle. AWS Global Accelerator: $0.025/hr per accelerator (~$18.25/mo) + $0.015/GB data premium + $0.015/GB egress surcharge + health checks $0.50/mo. Fastly DDoS Anycast not sold standalone. Vultr Anycast $5/mo per extra IP. Free Tier: Need ASN $500/yr ARIN + RIR fees $250/yr, no cloud free tier.

Recommended$5,000/moSelectCloudflare Magic Transit $5000/mo + BYOIP $5500/moFreeNo free optionSelectANSelf-host Anycast requires ASN $500/yr ARIN + Tailscale Anywhere?Cheaper$0.03/moSelectAWS Global Accelerator $0.025/hr + $0.015/GB premium + Vultr Anycast $5/mo IPPaid$5,000/moSelectCloudflare Magic Transit Enterprise $5000/mo + AWS Shield Advanced $3000/mo

+ OtherSkip this

Pricing & free-tier limitsCloudflare Custom Upload: Business $200/mo includes custom cert upload unlimited, Enterprise $5000+ includes Keyless SSL (private key never leaves HSM). Keyless SSL Enterprise add-on $0? Included in $5000/mo min + $3000/mo if standalone. AWS ACM Private CA $400/mo (~$0.55/hr) per CA + $0.75/private cert (first 1000), $0.10 short-lived (7-day). DigiCert OV $290/yr, EV $500/yr. Let's Encrypt free 90-day. Free Tier: Universal SSL free unlimited forever, custom requires Business+.

Recommended$200/moSelectCloudflare Keyless SSL + Custom Cert UploadFreeNo free optionSelectCloudflare Custom Cert Upload Free on Business $200/mo? + Let's Encrypt FreeCheaper$200/moSelectAWS ACM Private CA $400/mo + Cloudflare Business $200/mo includes customPaid$3,000/moSelectCloudflare Keyless SSL $3000/mo min Enterprise + DigiCert $300/yr cert

+ OtherSkip this

Pricing & free-tier limitsCloudflare DNSSEC: $0 free unlimited zones, auto-signing, NSEC3, free algorithm rollover. Pro $20 same. Route53 DNSSEC: $0.50/hosted zone/mo public zone + $0.50/mo per KSK? Actually $1/mo per DNSSEC enabled zone ($0.50 zone + $0.50 KSK extra?), + $0.40/M queries. GCP DNSSEC free signing included $0.50/zone + $0.40/M. Bunny DNSSEC free within $0.10/zone. NS1: $50/mo starter includes DNSSEC. Free Tier: Cloudflare DNSSEC unlimited free perpetual. Route53 no free tier.

RecommendedFreeSelectCloudflare DNSSEC Free + Route53 DNSSEC SigningFreeFreeSelectCloudflare DNSSEC Free unlimited zones + Bunny DNSSEC FreeCheaper$0.40/moSelectRoute53 DNSSEC $0.50/zone/mo + $0.40/M queries + Bunny FreePaid$50/moSelectNSNS1 DNSSEC Included $50/mo + DNSSEC Advantage + Akamai

+ OtherSkip this

Pricing & free-tier limitsWorkers KV Free: 1GB storage, 100k reads/day, 1k writes/day, 1k deletes, 1k lists, eventual consistency global <60s. Paid $5/mo: 1GB, 10M reads incl ($0.50/M after), 1M writes incl ($5/M after), 1M deletes/lists incl. Upstash Redis Free: 10k commands/day, 256MB, $0.20/100k cmds after + $0.30/GB bandwidth. Fastly KV Store: $0.015/10k reads? Actually Config Store $0.02/10k reads. DynamoDB Global: $1.25/M WRU $0.25/M RRUs + global tables $0.75/M replicated WRU. Free Tier: KV Free 1GB perpetual.

RecommendedFreeSelectCloudflare Workers KV Free 1GB + D1 Free 5GBFreeFreeSelectCloudflare KV Free 1GB 100k reads/day + Upstash Redis Free 10k cmdsCheaper$0.02/moSelectCloudflare KV $5/mo 1GB + 10M reads + Upstash $0.20/100k cmds $10/moPaid$0.02/moSelectFastly Config Store + Edge Dictionaries + AWS DAX / DynamoDB Global

+ OtherSkip this

Pricing & free-tier limitsAWS Network Firewall: $0.395/hr per firewall endpoint (~$288.35/mo) + $0.065/GB processed ($65/TB) + rule groups free 3 managed. AWS SG free unlimited. Azure Firewall Basic $0.39/hr (~$285/mo) + $0.016/GB processed, Standard $0.55/hr (~$401/mo). GCP Firewall: Free base implicit, Cloud NGFW Standard $0? Enterprise $0.01/hr per deployment. Cloudflare Gateway L4 firewall Free 50 users, Teams $7/user/mo. Hetzner cloud firewall free 10 rules per server. Free Tier: SGs/Firewall rules free forever, NFV no free tier.

Recommended$0.40/moSelectAWS Network Firewall $0.395/hr + Cloudflare Gateway L4 Firewall Free 50 usersFreeFreeSelectAWS Security Groups Free + Hetzner Firewall Free + Cloudflare Gateway FreeCheaper$0.55/moSelectHetzner Firewall Free + pfSense Self-Host $3.29/mo + GCP Firewall Free basePaid$288/moSelectAWS Network Firewall $0.395/hr per endpoint ~$288/mo + $0.065/GB + Azure Firewall

+ OtherSkip this

Pricing & free-tier limitsCloudflare China Network: Enterprise min $5000/mo base + $3000/mo China Network add-on + $0.19/GB China egress (vs $0.085 global) + ICP filing $0 but requires entity. JDCloud $0.18/GB China. Alibaba Cloud CDN: China mainland $0.14/GB + $50/mo service + ICP license requirement business license $0 but time 20 days. AWS China (Ningxia/Beijing): $0.12/GB egress China, compliance reviews PCI-DSS Level 1 included, SOC2 included $0 (audit artifacts free). Cloudflare SOC2/PCI isolation Enterprise $5000 includes PCI compliance package, private key isolation, geo key mgmt. Free Tier: None, compliance enterprise only, China requires ICP + enterprise contract.

Recommended$5,000/moSelectCloudflare China Network $5000/mo + Enterprise Compliance + AWS ChinaFreeNo free optionSelectNONone (ICP license required for China) - Cloudflare China requires EnterpriseCheaper$50/moSelectBunnyCDN CN via ChinaNet $100/mo + Alibaba Cloud CDN China $50/mo + ICPPaid$5,000/moSelectCloudflare China Network Enterprise $5000 base + $3000 China surcharge + $0.19/GB + AWS China Compliance

+ OtherSkip this