Zero-downtime certificate rotation at the edge (part 2)
Over the last few months we have spent a lot of time on zero-downtime certificate rotation at the edge. This is what we learned.What actually happens during a floodThe first thing to…
Over the last few months we have spent a lot of time on zero-downtime certificate rotation at the edge. This is what we learned.What actually happens during a floodThe first thing to…
ACK flood against a electronics retail platform in Western Europe, peaking at 289.8 Gbps. Mitigated in 0.249 seconds.
HTTP/2 rapid reset against a video streaming platform in Western Europe, peaking at 812.9 million requests per second. Mitigated in 0.194 seconds.
Slowloris against a crypto exchange platform in North America, peaking at 788.2 million requests per second. Mitigated in 0.182 seconds.
UDP reflection (NTP) against a sports betting platform in Southeast Asia, peaking at 17.7 Gbps. Mitigated in 0.749 seconds.
WebSocket connection flood against a online casino platform in the UK, peaking at 322.9 million requests per second. Mitigated in 0.246 seconds.
GRE flood against a fashion retail platform in North America, peaking at 99.7 Gbps. Mitigated in 0.023 seconds.
CLDAP reflection against a municipal services platform in the Nordics, peaking at 262.4 Gbps. Mitigated in 0.146 seconds.
search endpoint flood against a tax authority portal platform in Western Europe, peaking at 630.0 million requests per second. Mitigated in 0.704 seconds.
We get asked about reading a Deflecto incident report more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay the previous…
Rolled out to all points of presence on 9 January 2026. No action is required. Security: updated TLS library to […]
UDP reflection (NTP) against a online payments platform in Western Europe, peaking at 237.5 Gbps. Mitigated in 0.108 seconds.