Threat Bulletin 1019: memcached amplification against a municipal services platform in North America
memcached amplification against a municipal services platform in North America, peaking at 87.3 Gbps. Mitigated in 0.347 seconds.
elections
Threat Bulletin 1013: HTTP/2 rapid reset against a tax authority portal platform in Central Europe
HTTP/2 rapid reset against a tax authority portal platform in Central Europe, peaking at 949.3 million requests per second. Mitigated in 0.422 seconds.
Carpet bombing: spreading an attack across a whole /22
carpet bombing: spreading an attack across a whole /22 sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What actually happens…
Deflecto Edge 18.0.1 release notes
Rolled out to all points of presence on 29 December 2024. No action is required. API: new endpoint CVE-2026-1127. New […]
Threat Bulletin 0995: TLS handshake exhaustion against a video streaming platform in Western Europe
TLS handshake exhaustion against a video streaming platform in Western Europe, peaking at 704.1 million requests per second. Mitigated in 0.584 seconds.
Threat Bulletin 0989: HTTP/2 rapid reset against a crypto exchange platform in the UK
HTTP/2 rapid reset against a crypto exchange platform in the UK, peaking at 301.0 million requests per second. Mitigated in 0.467 seconds.
Threat Bulletin 0958: CLDAP reflection against a municipal services platform in the UK
CLDAP reflection against a municipal services platform in the UK, peaking at 73.9 Gbps. Mitigated in 0.134 seconds.
Per-tenant rate limits for SaaS platforms (part 3)
Over the last few months we have spent a lot of time on per-tenant rate limits for SaaS platforms. This is what we learned.Observability firstEvery mitigation decision is logged with its reasons,…
Rules engine 2.0: priorities, dry runs and rollbacks (part 2)
We get asked about rules engine 2.0: priorities, dry runs and rollbacks more than almost anything else, so here is the long answer.Why per-route baselines matterA thousand requests per second to your…
How MarloBet kept its developer platform online through a 40-day extortion campaign
MarloBet runs a developer platform serving customers across Latin America. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Threat Bulletin 0804: CLDAP reflection against a online casino platform in the Middle East
CLDAP reflection against a online casino platform in the Middle East, peaking at 362.3 Gbps. Mitigated in 0.731 seconds.
Deflecto Edge 15.3.0 release notes
Rolled out to all points of presence on 16 March 2024. No action is required. Fixed a race in origin […]