TLS handshake exhaustion against a crypto exchange platform in Latin America, peaking at 225.9 million requests per second. Mitigated in 0.235 seconds.
memcached amplification against a online payments platform in Central Europe, peaking at 115.9 Gbps. Mitigated in 0.535 seconds.
TLS handshake exhaustion against a developer platform platform in North America, peaking at 854.1 million requests per second. Mitigated in 0.379 seconds.
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay…
our SOC now covers three time zones sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Protecting the originNone of this…
CLDAP reflection against a online casino platform in the Middle East, peaking at 362.3 Gbps. Mitigated in 0.731 seconds.
BrioStack runs a electronics retail serving customers across the Nordics. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
search endpoint flood against a B2B SaaS platform in Latin America, peaking at 950.6 million requests per second. Mitigated in 0.546 seconds.
Rolled out to all points of presence on 3 March 2024. No action is required. Log streaming now supports per-tenant […]
why we wrote our proxy data plane in Rust sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What we changedWe…
carpet-bombing UDP flood against a online payments platform in the Middle East, peaking at 176.6 Gbps. Mitigated in 0.542 seconds.
This post is about per-tenant rate limits for SaaS platforms. It started, as most of our posts do, with an incident that did not go the way we expected.Lessons for your own…