qUIC and HTTP/3 at the edge: what changes for DDoS mitigation sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Lessons…
ACK flood against a ticketing platform in North America, peaking at 184.8 Gbps. Mitigated in 0.870 seconds.
cache-busting query flood against a video streaming platform in Latin America, peaking at 397.5 million requests per second. Mitigated in 0.908 seconds.
GRE flood against a news publisher platform in Iberia, peaking at 234.3 Gbps. Mitigated in 0.451 seconds.
SYN flood against a tax authority portal platform in North America, peaking at 220.8 Gbps. Mitigated in 0.110 seconds.
search endpoint flood against a ticketing platform in Southeast Asia, peaking at 902.7 million requests per second. Mitigated in 0.132 seconds.
credential stuffing against a online casino platform in the Nordics, peaking at 390.8 million requests per second. Mitigated in 0.180 seconds.
how we test WAF rules against seven days of real traffic sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What…
memcached amplification against a municipal services platform in the Nordics, peaking at 254.7 Gbps. Mitigated in 0.237 seconds.
carpet-bombing UDP flood against a ticketing platform in the Nordics, peaking at 256.1 Gbps. Mitigated in 0.133 seconds.
We get asked about attack seasonality: sports finals, sales and tax deadlines more than almost anything else, so here is the long answer.What we got wrongOur first version challenged too eagerly on…
HTTP/2 rapid reset against a sports betting platform in the Nordics, peaking at 309.8 million requests per second. Mitigated in 0.486 seconds.