What to put in your DDoS runbook (part 3)
We get asked about what to put in your DDoS runbook more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to…
scraping
Threat Bulletin 1154: carpet-bombing UDP flood against a healthcare portal platform in the Nordics
carpet-bombing UDP flood against a healthcare portal platform in the Nordics, peaking at 88.4 Gbps. Mitigated in 0.308 seconds.
Tail latency is the only latency that matters (part 2)
We get asked about tail latency is the only latency that matters more than almost anything else, so here is the long answer.Latency budgetOur budget for the whole filtering pipeline is one…
Threat Bulletin 1118: SYN flood against a ticketing platform in Western Europe
SYN flood against a ticketing platform in Western Europe, peaking at 207.1 Gbps. Mitigated in 0.104 seconds.
Deflecto Edge 19.1.0 release notes
Rolled out to all points of presence on 28 April 2025. No action is required. Proof-of-work challenge payload reduced by […]
Anycast is not magic: how we route attacks across 40 PoPs (part 2)
Here is a question we could not answer well a year ago: what really happens with anycast is not magic: how we route attacks across 40 PoPs? We can answer it now.Why…
Threat Bulletin 1073: SYN flood against a gaming community platform in the UK
SYN flood against a gaming community platform in the UK, peaking at 250.4 Gbps. Mitigated in 0.136 seconds.
Threat Bulletin 1065: CLDAP reflection against a fashion retail platform in Western Europe
CLDAP reflection against a fashion retail platform in Western Europe, peaking at 142.7 Gbps. Mitigated in 0.832 seconds.
Threat Bulletin 1047: ACK flood against a municipal services platform in the Benelux
ACK flood against a municipal services platform in the Benelux, peaking at 336.8 Gbps. Mitigated in 0.611 seconds.
Threat Bulletin 1042: GRE flood against a healthcare portal platform in Iberia
GRE flood against a healthcare portal platform in Iberia, peaking at 210.8 Gbps. Mitigated in 0.082 seconds.
How QuayHealth kept its municipal services online through the cup final
QuayHealth runs a municipal services serving customers across the Benelux. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Threat Bulletin 0985: credential stuffing against a online payments platform in Iberia
credential stuffing against a online payments platform in Iberia, peaking at 406.9 million requests per second. Mitigated in 0.671 seconds.