Per-tenant rate limits for SaaS platforms (part 3)
Over the last few months we have spent a lot of time on per-tenant rate limits for SaaS platforms. This is what we learned.Observability firstEvery mitigation decision is logged with its reasons,…
Threat Bulletin 0939: CLDAP reflection against a tax authority portal platform in Central Europe
CLDAP reflection against a tax authority portal platform in Central Europe, peaking at 251.4 Gbps. Mitigated in 0.404 seconds.
Threat Bulletin 0936: carpet-bombing UDP flood against a ticketing platform in the Nordics
carpet-bombing UDP flood against a ticketing platform in the Nordics, peaking at 167.0 Gbps. Mitigated in 0.496 seconds.
Deflecto Edge 17.2.1 release notes
Rolled out to all points of presence on 27 September 2024. No action is required. Deprecated /v1/incidents/{id}/export; removal scheduled for […]
Threat Bulletin 0930: Slowloris against a retail banking platform in the Nordics
Slowloris against a retail banking platform in the Nordics, peaking at 58.9 million requests per second. Mitigated in 0.318 seconds.
Threat Bulletin 0922: SYN flood against a airline booking platform in Central Europe
SYN flood against a airline booking platform in Central Europe, peaking at 280.8 Gbps. Mitigated in 0.879 seconds.
Threat Bulletin 0917: carpet-bombing UDP flood against a developer platform platform in the Benelux
carpet-bombing UDP flood against a developer platform platform in the Benelux, peaking at 22.9 Gbps. Mitigated in 0.484 seconds.
Threat Bulletin 0916: GRE flood against a online payments platform in the Nordics
GRE flood against a online payments platform in the Nordics, peaking at 205.1 Gbps. Mitigated in 0.165 seconds.
Threat Bulletin 0911: Slowloris against a developer platform platform in the UK
Slowloris against a developer platform platform in the UK, peaking at 317.4 million requests per second. Mitigated in 0.554 seconds.
Deflecto Edge 17.0.1 release notes
Rolled out to all points of presence on 25 August 2024. No action is required. Fixed a race in origin […]
A practical checklist for surviving Black Friday traffic
This post is about a practical checklist for surviving Black Friday traffic. It started, as most of our posts do, with an incident that did not go the way we expected.Lessons for…
Threat Bulletin 0897: credential stuffing against a online payments platform in North America
credential stuffing against a online payments platform in North America, peaking at 100.9 million requests per second. Mitigated in 0.936 seconds.