

This section highlights the necessity of implementing a customized rate limit system that is not met by standard Web Application Firewalls (WAF). To tackle these low-rate attacks, we built a utility that functions as a gatekeeper for your application. The request rate is small enough to evade throttling mechanisms implemented by firewalls but sufficient to make application unavailable. The attacker distributes traffic into smaller chunks of requests but spreads it to a larger number of fake requesters. In such cases, the attacker targets services that are built to serve low levels of traffic. Nevertheless, there are instances of DDOS attacks that occur at an unusually low rate. They majority of these attacks involve a huge burst of fake traffic that exhausts the application’s resources (Memory and CPU). DDoS, or Distributed Denial of Service, is an attack pattern that generates fake traffic to overwhelm organisation’s properties (websites, APIs, applications, etc.) and make it unavailable to legitimate users.

Many types of organizations encounter DDOS attacks daily.
