Threat Bulletin 0602: memcached amplification against a crypto exchange platform in the Middle East
memcached amplification against a crypto exchange platform in the Middle East, peaking at 285.6 Gbps. Mitigated in 0.333 seconds.
fintech
Threat Bulletin 0525: carpet-bombing UDP flood against a news publisher platform in Southeast Asia
carpet-bombing UDP flood against a news publisher platform in Southeast Asia, peaking at 287.0 Gbps. Mitigated in 0.408 seconds.
Measuring the real cost of a TLS handshake under attack (part 2)
We get asked about measuring the real cost of a TLS handshake under attack more than almost anything else, so here is the long answer.Latency budgetOur budget for the whole filtering pipeline…
Threat Bulletin 0487: UDP reflection (NTP) against a education platform platform in the Nordics
UDP reflection (NTP) against a education platform platform in the Nordics, peaking at 282.5 Gbps. Mitigated in 0.876 seconds.
Threat Bulletin 0483: ACK flood against a online casino platform in Western Europe
ACK flood against a online casino platform in Western Europe, peaking at 88.0 Gbps. Mitigated in 0.918 seconds.
Threat Bulletin 0456: TLS handshake exhaustion against a online casino platform in the Benelux
TLS handshake exhaustion against a online casino platform in the Benelux, peaking at 945.8 million requests per second. Mitigated in 0.616 seconds.
Threat Bulletin 0438: CLDAP reflection against a airline booking platform in Central Europe
CLDAP reflection against a airline booking platform in Central Europe, peaking at 82.5 Gbps. Mitigated in 0.604 seconds.
eBPF maps, hash collisions and a very long night (part 3)
Here is a question we could not answer well a year ago: what really happens with eBPF maps, hash collisions and a very long night? We can answer it now.Challenges beat blocksBlocking…
Threat Bulletin 0413: UDP reflection (DNS) against a online payments platform in Western Europe
UDP reflection (DNS) against a online payments platform in Western Europe, peaking at 199.2 Gbps. Mitigated in 0.282 seconds.
The hidden cost of retries during a flood (part 2)
Here is a question we could not answer well a year ago: what really happens with the hidden cost of retries during a flood? We can answer it now.Protecting the originNone of…
Threat Bulletin 0380: TLS handshake exhaustion against a fashion retail platform in the UK
TLS handshake exhaustion against a fashion retail platform in the UK, peaking at 85.3 million requests per second. Mitigated in 0.364 seconds.
Threat Bulletin 0351: WebSocket connection flood against a video streaming platform in Western Europe
WebSocket connection flood against a video streaming platform in Western Europe, peaking at 681.7 million requests per second. Mitigated in 0.784 seconds.