Why attackers love login endpoints
why attackers love login endpoints sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Why per-route baselines matterA thousand requests per…
saas
Threat Bulletin 1214: WebSocket connection flood against a crypto exchange platform in the Benelux
WebSocket connection flood against a crypto exchange platform in the Benelux, peaking at 488.2 million requests per second. Mitigated in 0.777 seconds.
Threat Bulletin 1209: CLDAP reflection against a electronics retail platform in the Benelux
CLDAP reflection against a electronics retail platform in the Benelux, peaking at 194.9 Gbps. Mitigated in 0.036 seconds.
Why we wrote our proxy data plane in Rust (part 3)
why we wrote our proxy data plane in Rust sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Latency budgetOur budget…
What we learned from our first hundred customers
This post is about what we learned from our first hundred customers. It started, as most of our posts do, with an incident that did not go the way we expected.Lessons for…
Deflecto Edge 19.8.0 release notes
Rolled out to all points of presence on 17 August 2025. No action is required. API: new endpoint GraphQL depth […]
Deflecto Edge 19.5.0 release notes
Rolled out to all points of presence on 16 July 2025. No action is required. Fixed a race in origin […]
Load testing through Deflecto without triggering mitigation
Over the last few months we have spent a lot of time on load testing through Deflecto without triggering mitigation. This is what we learned.Measuring successWe track three numbers for every incident:…
Deflecto Edge 19.4.0 release notes
Rolled out to all points of presence on 5 July 2025. No action is required. New dashboard widget: challenged vs. […]
Threat Bulletin 1133: WebSocket connection flood against a airline booking platform in North America
WebSocket connection flood against a airline booking platform in North America, peaking at 790.7 million requests per second. Mitigated in 0.792 seconds.
Threat Bulletin 1111: memcached amplification against a retail banking platform in the Benelux
memcached amplification against a retail banking platform in the Benelux, peaking at 137.4 Gbps. Mitigated in 0.313 seconds.
Threat Bulletin 1098: HTTP GET flood against a ticketing platform in the Middle East
HTTP GET flood against a ticketing platform in the Middle East, peaking at 599.7 million requests per second. Mitigated in 0.507 seconds.