Learning centre
How this all actually works.
Plain-English explanations of attacks, defences and the networking underneath — written to be useful whether or not you ever become a customer. No vendor spin, no gated PDFs.
Protection
8 articlesWhat is a WAF (Web Application Firewall)?
A web application firewall inspects HTTP traffic and blocks attacks like SQL injection and XSS before they reach your app. How a WAF works.
What is DDoS mitigation?
DDoS mitigation detects attack traffic and filters it out while real users keep getting through. Detection, scrubbing, always-on vs on-demand, pricing.
What is rate limiting?
Rate limiting caps how many requests a client may make in a period. Token bucket vs sliding window, what to key on, and avoiding punished shared IPs.
How to hide your origin IP address
If attackers find your real server IP they can bypass your DDoS protection entirely. The common ways an origin leaks and how to lock it down properly.
What is a proof-of-work challenge?
A proof-of-work challenge makes a browser solve a small computation before a page loads. Why it beats CAPTCHAs and how it changes attack economics.
What is DDoS-protected hosting?
DDoS-protected hosting puts filtering in front of your server by default. How it differs from adding protection later, and what to check before buying.
How to stop a DDoS attack
What to do while an attack is happening, what to do afterwards, and which common reactions make it worse. A practical sequence rather than a product pitch.
DDoS protection for game servers
Game servers need UDP filtering, low latency and a hidden origin — three things a normal web proxy cannot provide. What to look for and what to avoid.
Attacks & threats
7 articlesWhat is a DDoS attack?
A DDoS attack floods a target from many machines at once until it stops serving real users. Attack types, the layers they hit, and why they persist.
What is credential stuffing?
Credential stuffing uses username and password pairs leaked from other breaches to break into accounts on your site. How the attack works and how to stop it.
What is a SYN flood attack?
A SYN flood fills a server's connection table with handshakes it never finishes. How it works, why SYN cookies stop it, and how to spot one.
What is a UDP flood?
A UDP flood drowns a target in connectionless packets it must inspect and discard. Why game servers suffer most, and why null-routing is not protection.
What is a DNS amplification attack?
DNS amplification turns small queries into huge replies aimed at a victim, using open resolvers as unwitting weapons. How reflection works and how to defend.
What is a botnet?
A botnet is a network of compromised machines controlled remotely and used for attacks, fraud and spam. How they are built, controlled and detected.
What is an HTTP flood?
An HTTP flood attacks the application with requests that look legitimate. Why it needs so little traffic and why rate limiting alone will not stop it.
Network & delivery
7 articlesLayer 3/4 vs Layer 7 protection: what is the difference?
Layer 3/4 filters packets; Layer 7 understands HTTP requests. Which you need depends on whether you protect a website or a game server, mail host or VPN.
What is GRE tunneling?
GRE wraps packets inside other packets to create a virtual link between networks. How GRE tunnels deliver scrubbed traffic and hide an origin IP.
What is a CDN (Content Delivery Network)?
A CDN stores copies of your content worldwide so visitors are served from nearby. How caching works, what it does for speed, and how it absorbs attacks.
What is a reverse proxy?
A reverse proxy accepts requests for your servers and decides what to forward. How it differs from a forward proxy and why CDNs and WAFs are built on it.
What is Anycast?
Anycast advertises one IP address from many locations so each visitor reaches the nearest. How it lowers latency and spreads attack traffic network-wide.
What is SSL/TLS?
TLS encrypts traffic and proves a server is genuine. How the handshake works, what certificates actually prove, and why SSL is the wrong word for it.
What is BGP?
BGP is how independent networks announce which addresses they can reach. How routing works, why it runs on trust, and what that means for DDoS protection.
Bots & traffic
4 articlesWhat are web crawlers and bots?
Web crawlers are automated programs that fetch pages: search engines, AI bots, preview fetchers and scrapers. How to verify who is really crawling you.
What is bot management?
Bot management identifies automated traffic and decides what each kind may do. Detection signals, fingerprinting, challenges and avoiding false positives.
What is TLS fingerprinting (JA3 and JA4)?
TLS fingerprinting identifies the software behind a connection from how it negotiates the handshake. How JA3 and JA4 work, what they reveal, and their limits.
What is web scraping?
Web scraping extracts data from websites automatically. How scrapers work, when it is a problem, and what actually reduces it without blocking search engines.
Reading about it is one thing.
Put a WAF, CDN and unmetered DDoS mitigation in front of your site in about five minutes.