Keeping our control plane alive when the data plane is on fire (part 2)
keeping our control plane alive when the data plane is on fire sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under…
keeping our control plane alive when the data plane is on fire sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under…
GRE flood against a news publisher platform in Iberia, peaking at 234.3 Gbps. Mitigated in 0.451 seconds.
UDP reflection (DNS) against a online payments platform in Western Europe, peaking at 199.2 Gbps. Mitigated in 0.282 seconds.
CLDAP reflection against a online payments platform in Iberia, peaking at 227.8 Gbps. Mitigated in 0.818 seconds.
login endpoint flood against a municipal services platform in the Benelux, peaking at 372.6 million requests per second. Mitigated in 0.319 seconds.
memcached amplification against a electronics retail platform in the UK, peaking at 379.2 Gbps. Mitigated in 0.899 seconds.
UDP reflection (NTP) against a municipal services platform in Southeast Asia, peaking at 345.9 Gbps. Mitigated in 0.121 seconds.
TLS handshake exhaustion against a gaming community platform in North America, peaking at 264.5 million requests per second. Mitigated in 0.204 seconds.
SYN flood against a tax authority portal platform in North America, peaking at 220.8 Gbps. Mitigated in 0.110 seconds.
UDP reflection (DNS) against a online payments platform in Central Europe, peaking at 255.7 Gbps. Mitigated in 0.290 seconds.
credential stuffing against a tax authority portal platform in the Nordics, peaking at 497.5 million requests per second. Mitigated in 0.905 seconds.
Over the last few months we have spent a lot of time on eBPF maps, hash collisions and a very long night. This is what we learned.The numbersAcross the last quarter, 71%…