Tempesta FW: FrameWork and FireWall for WAF and DDoS mitigation
summary
Tempesta FW is an open-source hybrid HTTP accelerator and firewall designed for application-layer DDoS protection and building high-performance Web Application Firewalls (WAFs). It uses Synchronous Sockets — a socket API integrated into the TCP/IP stack — and an optimized finite-state HTTP parser to achieve maximal parsing and throughput performance.
AI-written summary · about
chapters (13)
- 0:00Tempesta FW introduction
- 1:00Why Tempesta FW
- 2:00Hybrid traffic filter
- 4:33Performance optimization
- 9:35App server issues
- 12:29High traffic handling
- 15:47Finite state optimization
- 20:55Optimization results
- 23:44Static acceleration
- 27:18Memory optimization
- 30:31Many connections handling
- 32:40Development plans
- 34:51DDoS attack handling
related talks
53mTempesta FW challenges, internals, use cases
42mThe Linux network stack extension for DDoS mitigation and web security
15mSTORM: Refinement Types for Secure Web Applications
38mWeb Application Firewalls Revisited
21mWAF Wars - The art of blocking attacks while having a coffee
38mWAFs! WAFs! We don't need no Stinkin' WAFs! Extending WAFs at the Application Layer
33mWAFs FTW! A modern devops approach to security testing your WAF
30mMathematics and development of fast TLS handshakes