Threat Bulletin 0797: memcached amplification against a healthcare portal platform in Western Europe
memcached amplification against a healthcare portal platform in Western Europe, peaking at 131.3 Gbps. Mitigated in 0.445 seconds.
e-commerce
The hidden cost of retries during a flood (part 4)
Over the last few months we have spent a lot of time on the hidden cost of retries during a flood. This is what we learned.Latency budgetOur budget for the whole filtering…
QUIC and HTTP/3 at the edge: what changes for DDoS mitigation (part 3)
We get asked about qUIC and HTTP/3 at the edge: what changes for DDoS mitigation more than almost anything else, so here is the long answer.The economics behind itA booter service rents…
Threat Bulletin 0766: TLS handshake exhaustion against a crypto exchange platform in Latin America
TLS handshake exhaustion against a crypto exchange platform in Latin America, peaking at 54.3 million requests per second. Mitigated in 0.339 seconds.
Threat Bulletin 0756: HTTP GET flood against a fashion retail platform in North America
HTTP GET flood against a fashion retail platform in North America, peaking at 161.5 million requests per second. Mitigated in 0.267 seconds.
Residential proxies are the new botnet
We get asked about residential proxies are the new botnet more than almost anything else, so here is the long answer.Lessons for your own runbookKnow who can change DNS at two in…
Deflecto Edge 12.0.0 release notes
Rolled out to all points of presence on 17 October 2023. No action is required. Added challenged vs. dropped traffic […]
Threat Bulletin 0661: login endpoint flood against a retail banking platform in the Middle East
login endpoint flood against a retail banking platform in the Middle East, peaking at 949.0 million requests per second. Mitigated in 0.936 seconds.
The new incident timeline, explained (part 2)
the new incident timeline, explained sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Measuring successWe track three numbers for every…
Threat Bulletin 0613: SYN flood against a online payments platform in North America
SYN flood against a online payments platform in North America, peaking at 55.8 Gbps. Mitigated in 0.323 seconds.
Dropping 800 million packets per second with XDP
dropping 800 million packets per second with XDP sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Observability firstEvery mitigation decision…
Threat Bulletin 0584: credential stuffing against a video streaming platform in Iberia
credential stuffing against a video streaming platform in Iberia, peaking at 301.9 million requests per second. Mitigated in 0.805 seconds.