Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Challenges beat blocksBlocking lists go stale within…
TLS handshake exhaustion against a developer platform platform in North America, peaking at 854.1 million requests per second. Mitigated in 0.379 seconds.
This post is about qUIC and HTTP/3 at the edge: what changes for DDoS mitigation. It started, as most of our posts do, with an incident that did not go the way…
We get asked about per-tenant rate limits for SaaS platforms more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to a…
carpet-bombing UDP flood against a healthcare portal platform in Iberia, peaking at 40.8 Gbps. Mitigated in 0.219 seconds.
UDP reflection (DNS) against a education platform platform in Southeast Asia, peaking at 376.5 Gbps. Mitigated in 0.541 seconds.
why we wrote our proxy data plane in Rust sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What we changedWe…
TLS handshake exhaustion against a online casino platform in the UK, peaking at 433.5 million requests per second. Mitigated in 0.061 seconds.
WebSocket connection flood against a retail banking platform in the Middle East, peaking at 309.7 million requests per second. Mitigated in 0.899 seconds.
Slowloris against a news publisher platform in Southeast Asia, peaking at 929.9 million requests per second. Mitigated in 0.375 seconds.
GRE flood against a crypto exchange platform in Iberia, peaking at 47.5 Gbps. Mitigated in 0.086 seconds.
UDP reflection (NTP) against a sports betting platform in Southeast Asia, peaking at 327.8 Gbps. Mitigated in 0.366 seconds.