This post is about rate limiting APIs without breaking legitimate integrations. It started, as most of our posts do, with an incident that did not go the way we expected.Latency budgetOur budget…
login endpoint flood against a tax authority portal platform in the Nordics, peaking at 373.5 million requests per second. Mitigated in 0.106 seconds.
carpet-bombing UDP flood against a healthcare portal platform in the UK, peaking at 389.6 Gbps. Mitigated in 0.241 seconds.
carpet-bombing UDP flood against a education platform platform in Central Europe, peaking at 294.4 Gbps. Mitigated in 0.443 seconds.
This post is about how we deploy rule changes to every edge in under 30 seconds. It started, as most of our posts do, with an incident that did not go the…
HTTP POST flood against a B2B SaaS platform in the UK, peaking at 460.4 million requests per second. Mitigated in 0.523 seconds.
deflecto turns five sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.The numbersAcross the last quarter, 71% of challenged clients…
Rolled out to all points of presence on 25 June 2025. No action is required. Faster rule propagation: median 16 […]
HTTP GET flood against a tax authority portal platform in Southeast Asia, peaking at 639.3 million requests per second. Mitigated in 0.023 seconds.
GRE flood against a crypto exchange platform in the Benelux, peaking at 293.1 Gbps. Mitigated in 0.275 seconds.
bot management without CAPTCHAs sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What actually happens during a floodThe first thing…
SablePlay runs a crypto exchange serving customers across the UK. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]