Threat Bulletin 0485: CLDAP reflection against a crypto exchange platform in Iberia
CLDAP reflection against a crypto exchange platform in Iberia, peaking at 275.2 Gbps. Mitigated in 0.130 seconds.
scraping
Threat Bulletin 0474: login endpoint flood against a education platform platform in North America
login endpoint flood against a education platform platform in North America, peaking at 118.7 million requests per second. Mitigated in 0.524 seconds.
eBPF maps, hash collisions and a very long night (part 3)
Here is a question we could not answer well a year ago: what really happens with eBPF maps, hash collisions and a very long night? We can answer it now.Challenges beat blocksBlocking…
Attacks are never metered: why we changed how we bill (part 2)
Over the last few months we have spent a lot of time on attacks are never metered: why we changed how we bill. This is what we learned.Why per-route baselines matterA thousand…
Threat Bulletin 0377: search endpoint flood against a ticketing platform in Southeast Asia
search endpoint flood against a ticketing platform in Southeast Asia, peaking at 902.7 million requests per second. Mitigated in 0.132 seconds.
Deflecto Edge 6.3.5 release notes
Rolled out to all points of presence on 23 July 2022. No action is required. Reduced p99 filtering latency by […]
Threat Bulletin 0348: CLDAP reflection against a crypto exchange platform in Iberia
CLDAP reflection against a crypto exchange platform in Iberia, peaking at 270.2 Gbps. Mitigated in 0.688 seconds.
Deflecto Edge 6.3.1 release notes
Rolled out to all points of presence on 11 June 2022. No action is required. Faster rule propagation: median 16 […]
Threat Bulletin 0293: UDP reflection (NTP) against a online casino platform in the Middle East
UDP reflection (NTP) against a online casino platform in the Middle East, peaking at 179.7 Gbps. Mitigated in 0.259 seconds.
Choosing between DNS delegation and CNAME onboarding
choosing between DNS delegation and CNAME onboarding sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Challenges beat blocksBlocking lists go…
Attack seasonality: sports finals, sales and tax deadlines (part 2)
We get asked about attack seasonality: sports finals, sales and tax deadlines more than almost anything else, so here is the long answer.What we got wrongOur first version challenged too eagerly on…
Threat Bulletin 0238: cache-busting query flood against a developer platform platform in Central Europe
cache-busting query flood against a developer platform platform in Central Europe, peaking at 764.4 million requests per second. Mitigated in 0.920 seconds.