Reading a Deflecto incident report (part 2)
Here is a question we could not answer well a year ago: what really happens with reading a Deflecto incident report? We can answer it now.The economics behind itA booter service rents…
Guides
Protecting WordPress login and XML-RPC from abuse (part 2)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to…
What to put in your DDoS runbook
We get asked about what to put in your DDoS runbook more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and every…
How to hide your origin IP properly
Here is a question we could not answer well a year ago: what really happens with how to hide your origin IP properly? We can answer it now.Lessons for your own runbookKnow…
Choosing between DNS delegation and CNAME onboarding
choosing between DNS delegation and CNAME onboarding sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Challenges beat blocksBlocking lists go…
Load testing through Deflecto without triggering mitigation (part 3)
We get asked about load testing through Deflecto without triggering mitigation more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident: time to mitigation,…
Reading a Deflecto incident report
Here is a question we could not answer well a year ago: what really happens with reading a Deflecto incident report? We can answer it now.Testing in production, safelyEvery rule starts in…
What to put in your DDoS runbook (part 2)
Here is a question we could not answer well a year ago: what really happens with what to put in your DDoS runbook? We can answer it now.The numbersAcross the last quarter,…
Rate limiting APIs without breaking legitimate integrations (part 3)
Here is a question we could not answer well a year ago: what really happens with rate limiting APIs without breaking legitimate integrations? We can answer it now.Observability firstEvery mitigation decision is…
Running a DDoS tabletop exercise with your team (part 2)
Over the last few months we have spent a lot of time on running a DDoS tabletop exercise with your team. This is what we learned.Measuring successWe track three numbers for every…
Keeping search engine bots happy while blocking scrapers (part 4)
Here is a question we could not answer well a year ago: what really happens with keeping search engine bots happy while blocking scrapers? We can answer it now.Measuring successWe track three…
A practical checklist for surviving Black Friday traffic (part 2)
We get asked about a practical checklist for surviving Black Friday traffic more than almost anything else, so here is the long answer.Lessons for your own runbookKnow who can change DNS at…