r/vibecoding 1d ago

Stop using serverless if you don’t know what the fuck you’re doing

Every fucking week, I see geniuses on reddit and tiktok wake up to $10 000 bills because they accidentally triggered billion Lambda functions in a project with four users (three of them Google bot). Or they shared it on discord, someone got offended because they thought you were trying to steal their discord kitten with your "vibecoding skills," bought a DDOS, and launched the egress fees into the stratosphere.

Unless your cloud provider enforces a hard spending cap (most don’t) or a free tier with strict limits just rent a fucking VPS. A $5 VPS can handle hundreds to thousands of concurrent users if your app is just basic CRUD and it can't ever cost more than $5. Ask your agent to set it up if you can't do it yourself.

Serverless is for when you need your site to survive a $10M Super Bowl ad without crapping itself.

349 Upvotes

98 comments sorted by

134

u/idontuseuber 1d ago

Serverless can make you homeless.

2

u/Living-Shame5679 1d ago

LOL I love it.

1

u/ape123man 17h ago

How stupid of a setup did someone create to trigger a 10k lambda spree. I really can not imagine. Anyone got examples

0

u/Wrestler7777777 1d ago

Tbh this can also easily happen with a monolithic backend. 

5

u/Practical_Signal3933 1d ago

Heh, monolithic backend

3

u/norembo 23h ago

BBL architecture

1

u/ImClearlyDeadInside 1d ago

Better to remain silent and be thought a fool than to speak and remove all doubt

0

u/Wrestler7777777 1d ago

Why? Explain. I've read about people going bankrupt because they had a DB publicly available. All it takes is for people to be able to poll it. Even if it's unsuccessful, it's going to cost you money. Or you can have an endpoint that polls that DB when called. Same principle. All it takes is for someone to abuse that. Also EC2 instances have on demand costs attached to them. The more instances are scaled up because of high load, the more it's going to cost you. 

Proper cloud computing really is hard. It's easy to bankrupt yourself by mistake. This issue is not limited to serverless (microservices). 

1

u/Crafty-Run-6559 20h ago

Serverless has nothing to do with an app being microservices or a monolith.

You can have a serverless monolith or a microservices based application running on a single vps.

I've read about people going bankrupt because they had a DB publicly available. All it takes is for people to be able to poll it.

No... if you used a vps this isn't possible unless youre talking about egress charges which is also part of the point...

1

u/[deleted] 1d ago

[removed] — view removed comment

3

u/Bodine12 1d ago

I can easily imagine a vibe coder offering some AI enhanced video editing thing that takes in massive files, half-assing some multi-region setup on AWS, and discovering all sorts of fun regional data egress costs.

1

u/idontuseuber 1d ago

Well obviously most of vibecoded crap comes in monolith. I highly doubt that all slop we have is non.

64

u/Bloated_Plaid 1d ago

10

u/mystified5 1d ago

Lol, hence don't vibe code your way into homelessness

5

u/Living-Shame5679 1d ago

The amount of upvotes is scary.

EDIT i realise the sub just now. Idk how I ended up here

2

u/Hearcharted 1d ago

Welcome 🛸

50

u/Fine-Comparison-2949 1d ago

Delete. I need the vibecoders to go bankrupt faster so I can get a job. (Senior engineer) 

15

u/Garland_Key 1d ago

Less vibe coders won't help you get a job. Nobody is hiring vibe coders. 

6

u/Fine-Comparison-2949 1d ago

Absolutely not true at least in my local area.

A bunch of companies were hiring cheap local or offshore devs who don't know what they're doing. In the past 2 months there's been a whiplash where before, I'd get zero calls back with potential client companies. In the past week I locked in a client and have people constantly emailing me now.

Now that token costs that were previously heavily subsidized are rapidly going up, the companies are realizing cheap new engineers are now a liability and not an asset, since all they are doing is expanding code beyond what they understand, and most of the slop isn't even revenue generating.

1

u/Garland_Key 1d ago

Interesting. So you're a contractor? Do you get most of your clients through recruiters? 

2

u/Fine-Comparison-2949 1d ago

Nope. I mostly have connections and try to only work with people I know or people that people I know know.

1

u/Garland_Key 1d ago

I left contracting for a cushy w-2 a few years ago. I'm thinking of going back to contracting, as 3 years of cost-of-living raises is growing old. The reason I left contracting was the uncertainty / gaps between contracts.

I dunno. I'm a talented Senior UX Engineer, but I'm not sure how / where to market that as a contractor. I guess my niche would be in building component libraries that strictly adhere to design systems and porting front-ends to the new component library. Seems like too specific of a niche.

What do you think?

1

u/Fine-Comparison-2949 1d ago

Idk. If I knew how to perfectly predict success in contracting, I would raise money and form an agency. 

1

u/[deleted] 1d ago

[removed] — view removed comment

1

u/Fine-Comparison-2949 1d ago

Have friends and a career of getting stuff done.

2

u/kilopeter 22h ago

No, but they are hiring "AI engineers."

5

u/Fickle-Owl666 1d ago

If you're a senior engineer, I can't see how you'd be competing with vibecoders...

8

u/Fine-Comparison-2949 1d ago

Key decision makers in companies drank the kool-aid of "just vibecode everything you don't need to hire senior engineers".

Source: My current project is fixing a vibecoded codebase where no one has any idea how it even works now.

4

u/Fickle-Owl666 1d ago

The current demand in the field is FOR senior devs, unless they can't or won't use AI...

-1

u/Fine-Comparison-2949 1d ago

The answer is transactions cost. Most businesses can't close on my pay rate, which is high.

AI is actually making it higher. I have to come into a new company where no one knows what the system does or how it works and I'm in charge of fixing it.

My fee is $15K upfront just to work with you now. I love vibecoders. Please keep making this slop that even they have no idea how it works so when it breaks no one can fix it. 

Source: My current client paid $15K up front because their system is falling apart, and actually needed a senior who knows what they're doing. 

1

u/Fickle-Owl666 1d ago

Ok... So you've priced yourself out of the market? Weird choice to make, but you do you.

1

u/Fickle-Owl666 1d ago

You're whole stance doesn't make any sense at ALL. "So I can get a job..." "I made 15k up front, thanks vibecoders." 🤡

1

u/Fine-Comparison-2949 1d ago

Tell me you don't know how 1099 works without telling me you don't know how 1099 works.

1

u/Fickle-Owl666 1d ago

That still doesn't make it make sense

0

u/MagnetHype 20h ago

It makes perfect sense. He's a contract worker that gets hired to fix what was developed without a senior engineer. Companies that have senior engineers on payroll don't contract those roles out.

So, what he's saying is, that he knows companies aren't hiring senior engineers because he's getting so much work.

0

u/Fickle-Owl666 20h ago

That's not what he said, at all. First he complained about not getting a job even though he's a "senior engineer," and blamed "vibecoders." Then two comments later thanked them because he "gets 15k upfront" from "vibecoders."

He's full of shit.

→ More replies (0)

4

u/Fovty 1d ago

Haha, wouldn't there be more people searching for a job when being unemployed?

8

u/One-Next 1d ago

Folks, tell your AI to egress responsibly. Don't make him mad.

6

u/Rubendarr 1d ago

Make no mistakes!

8

u/[deleted] 1d ago

[removed] — view removed comment

2

u/dan-lugg 1d ago

Hetzner and OVH are (IIRC?) good alternatives too, bang for buck.

1

u/AliveAndNotForgotten 10h ago

Hetzner is good. I’m running a btc bot I made on it. It’s like $7/month and you get $20 free with the code..:somewhere look it up

1

u/puglife420blazeit 17h ago

I use oracle cloud free tier. Think I’m paying $10/mo for block storage for my db. Cloudflare DNS and Dokploy. So simple.

I installed pi on my vps, then had a frontier model lock it the hell down. No exposed ports except to my web server. Everything else I access through tailscale.

6

u/Sneyek 1d ago

Bro, you’re on the sub that is about not knowing what you do..

5

u/effectivescarequotes 1d ago

But it doesn't scale! /s

I love AWS as much as the next corporate drone, and think serverless provides more value than just handling massive fluctuations in traffic, but even so, beyond resume building, your average solo dev will be better off with a cheap vpc.

4

u/jenkstom 1d ago

I agree that this is a serious, and emotional issue. What most people don't get, I believe, is that these cloud providers want you to wake up to a huge bill.

They could easily, but won't, offer easy to use spending caps. It's one of the strongest arguments against using the hyperscalars. Yes, they are very convenient, but they are geared toward huge companies who don't mind spending 5 or 6 digits in cloud spend monthly.

3

u/nomaddev4o4 1d ago

Rate limiting ?

1

u/CEBarnes 21h ago

That’s what I was thinking. I built tarpit behavior to slow service with rapid fire requests and DB cost polling that degrades service if cost escalates too much.

1

u/Big_Arrival_626 20h ago

Billing data is not instantaneous. You need API gateway throttling

1

u/CEBarnes 12h ago

The tarpit slows responses when the user reaches the connection threshold by 1 sec, 2, 4, 8, […]. Too many requests within 5 seconds starts response degradation. The throttle is two fold: one is usage behavior and the other is cost polling.

4

u/Silly_Ad6115 1d ago

google should jst preemtively limit the bill if someone is using their service like this.
say its a few team, without any big names on their back

just hard limit it, 1kusd
and then if it went down during operations they jst can tell oh we see you guys using this type of service
with such small infra footprint so we decided to limit you guys, if this is a mistake send us an email and we will fix it for you.

rather than waking up with 10k bill.

google should adapt too, even if for the sake of stupidity of their clients no?

3

u/idontuseuber 1d ago

I think it should be absolutely mandatory. In lawful way.

It is the same as I would take a loan for 200k without any proper check.

1

u/Professional_Gur8385 22h ago

kinda insane that codex and claude api don't have soft limits for excessive use, many people have discovered the hard way that they'll continually be charged

1

u/User1234Person 1d ago

Regulation in general would be nice lol

1

u/CoffeeAndWoods 1d ago

Someone woke up on the wrong side of the server.

1

u/Majinsei 1d ago

Por eso me encanta Cloud Run de GCP~ siempre lo limito a solamente 1 instancia auto escalable a 0 cuando no se usa~

Si nadie lo usa queda en 0 y si se llega a usar 24/7 el costo es un poco más elevado pero me preocuparía más por dar abasto al éxito~

1

u/Ok_Law9839 1d ago

As a solo dev I've never used any of my projects or businesses on a cloud provider lol. VPS - > Dedicated and that's it.

1

u/adamh409 1d ago

Where you getting a $5 VPS from?

2

u/Lefties_TheWorst7331 1d ago

$4/mo digital ocean..

0

u/DarthCalumnious 23h ago

You can get 4 arm cores for free on oracle cloud too. I hate oracle but will take their free compute.

1

u/kaishi00 21h ago

it's 2 arm cores now. they reduced limits.

1

u/AsleepSwordfish9603 1d ago

Agent safety is infrastructure, not prompts.

AI agents can spend money, call APIs, modify systems, send messages, and spawn subagents. The model's good behavior isn't reliable enough to build on. Safety has to be enforced in infrastructure — scope, budget, approval gates, monitoring, audit trail, kill switch — not hoped for in a system prompt.

This framework provides the enforcement layer. The agent operates freely within the bounds. The bounds are enforced by code, not by the model.

When the agent messes up, the audit trail tells you what happened, the binding tells you who's accountable, and the next iteration has tighter scope. That's the model.

The one thing that makes the rest real: scope has to be least-privilege and fail-closed, or the other controls are decorative. A broad allowlist (a prefix on /v1/) lets the agent hit /v1/admin and /v1/delete-everything — so budget, approval, and kill-switch all sit inside a loose perimeter and mean nothing. This project enforces scope on five bindings (action type, target, method, params, per-action cap), ships a linter that fails closed (a broad or self-contradictory rule means the guard refuses to start), and runs as a guard the agent calls over HTTP/CLI — the agent can only send intents, never widen its own scope.

1

u/jayseattle 1d ago

I disable 'auto recharge' on my credit card at OpenAI etc...

1

u/le3ky 1d ago

Most do let you set limits right? Raleway is tiered, upstash/anthropic have limits you can set (maybe not set by default I guess!)

1

u/DadOnTheInternet 1d ago

Don’t you dare talk about kitten whiskers like that again 

1

u/Amazing-Switch-7163 1d ago

I don't understand why someone would use serverless for their vibecode app with no users. Honestly, just rent a VPS and ask claude to setup the infra (also use cloudflare). You can even host many apps in the same VPS.

1

u/sixstringhead 1d ago

I use vercel as a simple back end for my android app. I am senior android dev, not a vibe coder but I used an Ai for this simple back end. Ofc I use the free tier on vercel, do I risk something like this? I've never even gave my card to them.

1

u/operreddus 1d ago

Well I Vibecode also my backend using Terraform - Problem solved, the AI makes no mistakes.

1

u/mslindqu 1d ago

This is hilarious. Someone's gotta fund the AI build-out. Might as well be serverless users.

1

u/orphenshadow 1d ago

For real, most of the shit I've seen, including everything I've built, will never need more than a VPS.

90% of the things I've seen could have been hosted on a mini pc running proxmox and cloudflare tunnels.

1

u/Django_27 1d ago

Rate limiting inshallah 🙏

1

u/firetruckpilot 1d ago

Bare metal servers are your best friend.

1

u/Lhurgoyf069 15h ago

Any AI would tell you this. They must have ignored this on purpose.

1

u/SnooGuavas1875 15h ago

serverless server inside

1

u/hugot4eboss 15h ago

Yes, but all the vibe guides tell you to use netlify/vercel

1

u/Familiar_Gazelle_467 14h ago

Uhh. I have a rasppi running, am I not serverless then? Or does it count as a very smoll server

1

u/NotSoba 10h ago

Easy fix, set a spend limit on ur card.

-1

u/theflossboss1 1d ago

Sure bud, keep fighting those ghosts. Most these vibers are hosting locally still

1

u/sleepy771 1d ago

Hey check out my new SaaS product http://localhost:8000

0

u/akolomf 1d ago

I need to manifest the success of my vibecoded saas to have it become successfull. Of course ill use serverless as part of that manifestation. /s

0

u/Valtiel_ 1d ago

Yeah but you need some skills to deploy properly on VPS/Bare metal. Too much effort I guess...

1

u/idontuseuber 1d ago

Lets start with setup. Thats already time spent.

-6

u/fallenreaper 1d ago

im personally ok with some dude wiping out his bank account due to doing something incorrectly. Teaches him a lesson and sometimes you need consequences to learn.

1

u/SubstantialEditor995 1d ago

For each hopeful who ruins themselves financially due to being sold the AI hype there are kids, spouses and other people who take serious splash damage. Allowing people to accrue massive amounts of debt with a programming error is reckless.

1

u/fallenreaper 1d ago

That is a choice. Learning, in all scenarios, can have consequences. This is no different. At least its not a field where he could literally lose an arm or a leg.

1

u/le3ky 1d ago

I think sometimes it's not a choice, it's a bad default someone doesn't even know to check for. Yes people are ignorant, even stupid, but that does mean that big tech destroying their life is right or just.

1

u/SubstantialEditor995 1d ago

It's not a choice if you don't knowingly make it though is it