Deflecto Edge 22.3.4 release notes
Rolled out to all points of presence on 17 September 2026. No action is required. API: new endpoint Android WebView. […]
gdpr
Threat Bulletin 1438: search endpoint flood against a online payments platform in the UK
search endpoint flood against a online payments platform in the UK, peaking at 811.7 million requests per second. Mitigated in 0.683 seconds.
Threat Bulletin 1434: TLS handshake exhaustion against a municipal services platform in Iberia
TLS handshake exhaustion against a municipal services platform in Iberia, peaking at 483.1 million requests per second. Mitigated in 0.537 seconds.
Deflecto Edge 22.3.1 release notes
Rolled out to all points of presence on 15 August 2026. No action is required. Reduced p99 filtering latency by […]
Anycast is not magic: how we route attacks across 40 PoPs
Here is a question we could not answer well a year ago: what really happens with anycast is not magic: how we route attacks across 40 PoPs? We can answer it now.Measuring…
Threat Bulletin 1421: search endpoint flood against a online casino platform in the Nordics
search endpoint flood against a online casino platform in the Nordics, peaking at 359.8 million requests per second. Mitigated in 0.841 seconds.
How to hide your origin IP properly (part 3)
This post is about how to hide your origin IP properly. It started, as most of our posts do, with an incident that did not go the way we expected.Testing in production,…
Threat Bulletin 1405: UDP reflection (NTP) against a B2B SaaS platform in the UK
UDP reflection (NTP) against a B2B SaaS platform in the UK, peaking at 337.1 Gbps. Mitigated in 0.585 seconds.
Threat Bulletin 1389: HTTP/2 rapid reset against a online payments platform in Western Europe
HTTP/2 rapid reset against a online payments platform in Western Europe, peaking at 903.4 million requests per second. Mitigated in 0.528 seconds.
Threat Bulletin 1380: search endpoint flood against a online payments platform in the Benelux
search endpoint flood against a online payments platform in the Benelux, peaking at 389.4 million requests per second. Mitigated in 0.750 seconds.
Threat Bulletin 1375: credential stuffing against a electronics retail platform in the Middle East
credential stuffing against a electronics retail platform in the Middle East, peaking at 285.5 million requests per second. Mitigated in 0.758 seconds.
Building a per-route baseline without storing every request
Over the last few months we have spent a lot of time on building a per-route baseline without storing every request. This is what we learned.Observability firstEvery mitigation decision is logged with…