Your site is under DDoS attack: what to do in the first 10 minutes
How to tell an attack from a genuine traffic spike, the three panic moves that make things worse, and the steps that actually keep your server up — in the right order.
Home
Guides
Practical write-ups on DDoS mitigation, DNS migration and keeping your origin server out of reach.
How your origin server IP leaks even behind a proxy: 6 ways
Moving to a proxy does not hide your server address by itself. Six common ways the address gets out, and how to close each one.
Migrating your DNS away from Cloudflare without downtime
How to move a domain to a new DNS provider while keeping the site, email and SSL alive — including the proxied-record trap almost everyone walks into.
DDoS protection for high-risk industries: when the big providers say no
Why mainstream providers decline certain sectors, whether there is a technical reason behind it, and what you should still demand from a provider that accepts you.
The largest DDoS attacks ever recorded: the top 10, who ran them, how long they lasted
Size, target and duration for the ten largest publicly disclosed attacks — plus four things the table does not tell you, including why the durations collapsed to seconds.