Detection
Attack or just a traffic spike?
- DDoS or Traffic Spike? How to Tell Them Apart Fast
DDoS or traffic spike: eight signals from your logs and analytics that separate a real audience from a botnet in about ten minutes, plus what to do next.
- Detect a DDoS Attack: Signs in Logs, Metrics and Traffic
How to detect a DDoS attack with nginx logs, ss, iftop and CDN analytics: which numbers spike, the commands to run, and when load stops being normal.
- Types of DDoS Attacks: Volumetric, Protocol and Layer 7
The main types of DDoS attacks explained: volumetric, protocol and layer 7 floods, how each is measured (bps, pps, rps), how to spot them and who can filter them.