Tomas, a reliability and security engineer at Streamline Media, keeps the streaming service up under attack with the eight-layer DDoS defense stack: a flood of UDP, SYN and HTTP traffic from a botnet narrows as it passes edge and anycast, upstream network filtering, rate limiting, protocol defenses, application defenses, scrubbing, failover and capacity, and the runbook, until only clean traffic reaches origin. Always-on scrubbing returns traffic over GRE without exposing the origin, a saturated region is evacuated to three healthy ones with calculated headroom, playback is protected first, and a practiced runbook names one incident lead.

CY-MID-030Mid Level · DDoS Defense

DDoS Defense & Mitigation — The DDoS Defense Stack

A hands-on mid-level course that keeps a service online under attack. Work the DDoS defense stack - eight layers: Edge & Anycast, Network Filtering, Rate Limiting, Protocol Defenses, Application Defenses, Scrubbing, Failover & Capacity, and Runbook - absorbing volumetric, protocol, and application-layer attacks with real edge, firewall, and WAF work. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Distinguish volumetric, protocol, and application-layer DDoS attacks.
Absorb traffic at the edge and filter upstream on the network.
Defend protocols and applications with rate limits and challenges.
Route to scrubbing, plan capacity and failover, and run the playbook.

Price:৳8,000