Threat Bulletin 0828: SYN flood against a developer platform platform in Iberia
SYN flood against a developer platform platform in Iberia, peaking at 340.3 Gbps. Mitigated in 0.082 seconds.
QUIC and HTTP/3 at the edge: what changes for DDoS mitigation
This post is about qUIC and HTTP/3 at the edge: what changes for DDoS mitigation. It started, as most of our posts do, with an incident that did not go the way…
Keeping search engine bots happy while blocking scrapers (part 2)
Here is a question we could not answer well a year ago: what really happens with keeping search engine bots happy while blocking scrapers? We can answer it now.Protecting the originNone of…
Per-tenant rate limits for SaaS platforms (part 4)
We get asked about per-tenant rate limits for SaaS platforms more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to a…
Threat Bulletin 0827: carpet-bombing UDP flood against a video streaming platform in Western Europe
carpet-bombing UDP flood against a video streaming platform in Western Europe, peaking at 387.0 Gbps. Mitigated in 0.416 seconds.
Deflecto Edge 15.3.4 release notes
Rolled out to all points of presence on 29 April 2024. No action is required. API: new endpoint Azure Sentinel. […]
Threat Bulletin 0826: cache-busting query flood against a retail banking platform in North America
cache-busting query flood against a retail banking platform in North America, peaking at 498.2 million requests per second. Mitigated in 0.480 seconds.
Threat Bulletin 0825: ACK flood against a retail banking platform in North America
ACK flood against a retail banking platform in North America, peaking at 137.6 Gbps. Mitigated in 0.141 seconds.
Threat Bulletin 0824: TLS handshake exhaustion against a sports betting platform in the UK
TLS handshake exhaustion against a sports betting platform in the UK, peaking at 105.9 million requests per second. Mitigated in 0.404 seconds.
Threat Bulletin 0823: Slowloris against a online casino platform in Southeast Asia
Slowloris against a online casino platform in Southeast Asia, peaking at 585.0 million requests per second. Mitigated in 0.635 seconds.
Zero-downtime certificate rotation at the edge
zero-downtime certificate rotation at the edge sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Measuring successWe track three numbers for…
Threat Bulletin 0822: ACK flood against a electronics retail platform in Southeast Asia
ACK flood against a electronics retail platform in Southeast Asia, peaking at 93.5 Gbps. Mitigated in 0.224 seconds.