Network Infrastructure Cost Planner

Network infrastructure costs: what this planner estimates

This calculator helps you estimate monthly and annual network-infrastructure spend for an internet-facing website or application based on your outbound bandwidth, peak request rate, geographic footprint, and the protection/performance services you enable (CDN, DDoS protection, load balancing, WAF, and monitoring). The result is a budgeting model: it’s designed to help you compare scenarios (e.g., “single-region vs multi-region”, “with CDN vs without”) and understand which levers usually drive the bill.

Key inputs and why they matter

1) Monthly outbound bandwidth (GB)

Most providers charge primarily for data egress (traffic leaving their network to the public internet). Bandwidth-heavy products (video, downloads, large images) can see network costs become a dominant line item.

2) Peak traffic (requests/second)

Peak request rate is a proxy for how much edge/ingress capacity you need. It tends to influence load balancer sizing, WAF inspection volume, and operational overhead. Even if your total bandwidth is modest, a very high RPS API can require more robust front-door infrastructure.

3) Geographic regions served

Serving multiple regions usually increases cost because you pay for additional endpoints, redundancy, health checks, and sometimes inter-region replication/transfer. It also reduces latency and can improve availability.

4) Enabled services (CDN, DDoS, LB, WAF, monitoring)

These services trade money for performance, availability, and risk reduction. Many teams choose a minimal set early on, then expand coverage as the business grows or becomes a more attractive target.

Cost model and formulas

A simplified way to think about monthly network cost is:

Cost_month = Egress_Cost + CDN_Cost + DDoS_Cost + LB_Cost + WAF_Cost + Monitoring_Cost

Bandwidth / egress

At a high level, egress cost can be modeled as:

Egress Cost = Outbound_GB × price_per_GB

Typical retail egress rates vary by provider, region, and commit level. The planner uses representative ranges (often cited around $0.085–$0.15/GB for many public cloud internet egress tiers) as an estimation baseline.

CDN impact (cache offload)

A CDN can reduce origin egress by caching content at the edge. A simplified approach is:

Origin Egress After CDN = Outbound_GB × (1 − cache_hit_rate)

Then you may pay separate CDN egress rates (often lower than origin) plus request/logging fees depending on the provider.

Peak traffic effects

Peak RPS tends to map to:

  • Load balancer(s) (per-LB fixed cost and sometimes LCU/processed bytes/request-based add-ons)
  • WAF (per-request inspection, rule groups, and logging/retention)
  • Monitoring (metrics cardinality, logs, traces, alerting)

This calculator treats peak traffic as a sizing proxy rather than a precise request-metering model.

How to interpret the results

  • Monthly total is best used for budgeting and scenario comparison.
  • Annual total is simply monthly × 12; it’s useful for planning commits/reserved capacity discussions.
  • Line items help you see what’s dominating: egress (bandwidth) is often #1 for media-heavy apps, while WAF/DDoS may dominate for low-bandwidth but high-risk workloads.

If your estimate feels “too high” or “too low,” the first things to validate are (a) the portion of traffic that is truly outbound to the internet, (b) realistic cache hit rate for your content mix, and (c) whether you will be paying for logs (WAF/CDN access logs can add up).

Worked example

Scenario: E-commerce application serving 5 regions, ~50 TB/month outbound (50,000 GB), ~5,000 peak RPS, with CDN, advanced DDoS protection, load balancing, WAF, and monitoring.

  1. Raw egress (no CDN): 50,000 GB × $0.10/GB = $5,000/month
  2. With CDN offload (assume 70% cache hit):
    • Origin egress: 50,000 × (1 − 0.70) = 15,000 GB
    • Origin egress cost: 15,000 × $0.10 = $1,500/month
    • CDN delivery cost (example rate): 50,000 × $0.05 = $2,500/month (provider-dependent)
  3. Security & routing services (illustrative): DDoS advanced ~$3,000, WAF ~$200, multi-region LB ~$300, monitoring ~$300

Interpretation: Even if the CDN reduces origin egress, you still pay for delivery through the CDN; the real win is often (a) improved performance and (b) lower origin load, plus sometimes lower blended egress depending on provider/plan.

Typical cost drivers by app type

Application type Main cost driver Usually worth prioritizing Common surprises
Blog / static site CDN minimums, basic egress CDN + basic WAF Logging/analytics retention costs
SaaS app WAF, LB, monitoring WAF rules + observability High peak RPS inflating edge costs
E-commerce Security + availability DDoS + WAF + multi-region readiness Bot traffic and checkout abuse raising WAF/DDoS usage
Video / media Bandwidth (delivery) CDN strategy and caching/origin shield Origin fetch + miss traffic during launches
API / data service Peak RPS and protection Rate limiting + WAF + monitoring Many small responses → high request-based charges

Assumptions & limitations (important)

  • Estimates, not invoices: Real pricing depends on provider, region, contract/commits, and specific feature usage.
  • Egress vs ingress: The model focuses on outbound internet traffic. Inbound traffic is often free, but not always (and some services meter both directions differently).
  • Inter-region transfer: Replication and cross-region traffic (active-active databases, service-to-service calls) can be significant and may not be captured by a simple “regions served” multiplier.
  • CDN cache hit rate varies: Dynamic pages, personalized content, and low-TTL assets reduce cache efficiency; cache hit rate assumptions may be optimistic for some workloads.
  • Request-based fees: Many CDNs/WAFs/LBs add per-request, rule-group, LCU, or processed-bytes fees; peak RPS is only a proxy here.
  • Logging/retention: Access logs, WAF logs, and analytics can add meaningful spend; retention, indexing, and SIEM export costs are highly variable.
  • TLS, certificates, and add-ons: Some providers charge for dedicated IPs, advanced TLS, bot management, origin shield, or specialized routing; these may be excluded.
  • Security posture is contextual: “Basic vs advanced” DDoS/WAF needs depend on your threat model, compliance requirements, and business risk tolerance.

Calculate monthly costs for CDN, DDoS protection, load balancing, and bandwidth management

Traffic & Bandwidth
Type affects data intensity and protection needs
Total outbound bandwidth per month
Maximum concurrent requests per second
Number of data center regions needed
Infrastructure Services
Higher protection costs more but essential for critical services
More redundancy costs more but improves reliability

Embed this calculator

Copy and paste the HTML below to add the Network Infrastructure Cost Planner | AgentCalc to your website.