Per-tenant rate limits for SaaS platforms (part 4)
We get asked about per-tenant rate limits for SaaS platforms more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to a…
slowloris
Threat Bulletin 0821: GRE flood against a developer platform platform in Latin America
GRE flood against a developer platform platform in Latin America, peaking at 158.3 Gbps. Mitigated in 0.302 seconds.
Threat Bulletin 0817: Slowloris against a electronics retail platform in the Benelux
Slowloris against a electronics retail platform in the Benelux, peaking at 601.7 million requests per second. Mitigated in 0.687 seconds.
Threat Bulletin 0795: carpet-bombing UDP flood against a gaming community platform in Western Europe
carpet-bombing UDP flood against a gaming community platform in Western Europe, peaking at 279.3 Gbps. Mitigated in 0.548 seconds.
QUIC and HTTP/3 at the edge: what changes for DDoS mitigation (part 3)
We get asked about qUIC and HTTP/3 at the edge: what changes for DDoS mitigation more than almost anything else, so here is the long answer.The economics behind itA booter service rents…
How we deploy rule changes to every edge in under 30 seconds (part 3)
how we deploy rule changes to every edge in under 30 seconds sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under…
Threat Bulletin 0750: HTTP/2 rapid reset against a online payments platform in North America
HTTP/2 rapid reset against a online payments platform in North America, peaking at 52.6 million requests per second. Mitigated in 0.483 seconds.
Threat Bulletin 0720: UDP reflection (DNS) against a online payments platform in the Nordics
UDP reflection (DNS) against a online payments platform in the Nordics, peaking at 255.1 Gbps. Mitigated in 0.589 seconds.
Threat Bulletin 0715: memcached amplification against a electronics retail platform in the UK
memcached amplification against a electronics retail platform in the UK, peaking at 361.3 Gbps. Mitigated in 0.074 seconds.
Threat Bulletin 0693: SYN flood against a municipal services platform in Central Europe
SYN flood against a municipal services platform in Central Europe, peaking at 63.9 Gbps. Mitigated in 0.370 seconds.
EU-only processing is now available on every plan (part 2)
eU-only processing is now available on every plan sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Why per-route baselines matterA…
What DORA means for your DDoS resilience
Here is a question we could not answer well a year ago: what really happens with what DORA means for your DDoS resilience? We can answer it now.Why per-route baselines matterA thousand…