Threat Bulletin 0989: HTTP/2 rapid reset against a crypto exchange platform in the UK
HTTP/2 rapid reset against a crypto exchange platform in the UK, peaking at 301.0 million requests per second. Mitigated in 0.467 seconds.
syn-flood
Threat Bulletin 0936: carpet-bombing UDP flood against a ticketing platform in the Nordics
carpet-bombing UDP flood against a ticketing platform in the Nordics, peaking at 167.0 Gbps. Mitigated in 0.496 seconds.
Threat Bulletin 0911: Slowloris against a developer platform platform in the UK
Slowloris against a developer platform platform in the UK, peaking at 317.4 million requests per second. Mitigated in 0.554 seconds.
Threat Bulletin 0909: carpet-bombing UDP flood against a B2B SaaS platform in the Nordics
carpet-bombing UDP flood against a B2B SaaS platform in the Nordics, peaking at 108.1 Gbps. Mitigated in 0.577 seconds.
A practical checklist for surviving Black Friday traffic
This post is about a practical checklist for surviving Black Friday traffic. It started, as most of our posts do, with an incident that did not go the way we expected.Lessons for…
Deflecto Edge 16.2.0 release notes
Rolled out to all points of presence on 19 July 2024. No action is required. New dashboard widget: Safari 19. […]
Attack seasonality: sports finals, sales and tax deadlines (part 4)
Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Challenges beat blocksBlocking lists go stale within…
Connection pooling to the origin: the numbers that surprised us (part 2)
connection pooling to the origin: the numbers that surprised us sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Lessons for…
How MarloBet kept its developer platform online through a 40-day extortion campaign
MarloBet runs a developer platform serving customers across Latin America. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Keeping search engine bots happy while blocking scrapers (part 2)
Here is a question we could not answer well a year ago: what really happens with keeping search engine bots happy while blocking scrapers? We can answer it now.Protecting the originNone of…
Per-tenant rate limits for SaaS platforms (part 4)
We get asked about per-tenant rate limits for SaaS platforms more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to a…
Threat Bulletin 0786: cache-busting query flood against a B2B SaaS platform in Latin America
cache-busting query flood against a B2B SaaS platform in Latin America, peaking at 314.7 million requests per second. Mitigated in 0.554 seconds.