HTTP/2 rapid reset one year later
Here is a question we could not answer well a year ago: what really happens with hTTP/2 rapid reset one year later? We can answer it now.Testing in production, safelyEvery rule starts…
observability
Attack seasonality: sports finals, sales and tax deadlines (part 3)
attack seasonality: sports finals, sales and tax deadlines sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Lessons for your own…
Threat Bulletin 0060: TLS handshake exhaustion against a online payments platform in North America
TLS handshake exhaustion against a online payments platform in North America, peaking at 111.3 million requests per second. Mitigated in 0.807 seconds.
Threat Bulletin 0057: search endpoint flood against a education platform platform in Latin America
search endpoint flood against a education platform platform in Latin America, peaking at 641.5 million requests per second. Mitigated in 0.752 seconds.
Threat Bulletin 0048: GRE flood against a B2B SaaS platform in Iberia
GRE flood against a B2B SaaS platform in Iberia, peaking at 46.5 Gbps. Mitigated in 0.119 seconds.
Threat Bulletin 0010: CLDAP reflection against a municipal services platform in Western Europe
CLDAP reflection against a municipal services platform in Western Europe, peaking at 123.1 Gbps. Mitigated in 0.132 seconds.