Deflecto Edge 22.3.3 release notes
Rolled out to all points of presence on 7 September 2026. No action is required. Fixed a race in origin […]
waf
Threat Bulletin 1430: HTTP POST flood against a online payments platform in the Middle East
HTTP POST flood against a online payments platform in the Middle East, peaking at 233.5 million requests per second. Mitigated in 0.650 seconds.
Threat Bulletin 1429: carpet-bombing UDP flood against a ticketing platform in Southeast Asia
carpet-bombing UDP flood against a ticketing platform in Southeast Asia, peaking at 373.7 Gbps. Mitigated in 0.233 seconds.
Threat Bulletin 1415: search endpoint flood against a crypto exchange platform in North America
search endpoint flood against a crypto exchange platform in North America, peaking at 208.0 million requests per second. Mitigated in 0.236 seconds.
Deflecto Edge 22.2.0 release notes
Rolled out to all points of presence on 21 July 2026. No action is required. Security: updated TLS library to […]
How to hide your origin IP properly (part 3)
This post is about how to hide your origin IP properly. It started, as most of our posts do, with an incident that did not go the way we expected.Testing in production,…
NIS2 and availability: a plain-language summary
Here is a question we could not answer well a year ago: what really happens with nIS2 and availability: a plain-language summary? We can answer it now.Protecting the originNone of this matters…
Threat Bulletin 1400: GRE flood against a developer platform platform in Latin America
GRE flood against a developer platform platform in Latin America, peaking at 26.9 Gbps. Mitigated in 0.689 seconds.
Deflecto Edge 22.1.2 release notes
Rolled out to all points of presence on 3 June 2026. No action is required. API: new endpoint JA4 fingerprint […]
Threat Bulletin 1371: HTTP/2 rapid reset against a airline booking platform in Western Europe
HTTP/2 rapid reset against a airline booking platform in Western Europe, peaking at 627.6 million requests per second. Mitigated in 0.591 seconds.
Building a per-route baseline without storing every request
Over the last few months we have spent a lot of time on building a per-route baseline without storing every request. This is what we learned.Observability firstEvery mitigation decision is logged with…
Tuning challenge thresholds for mobile traffic behind CGNAT
tuning challenge thresholds for mobile traffic behind CGNAT sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What actually happens during…