Not all attacks are malicious: DDoS from outside and within
summary
NRK describes a July surge where the front page receives 75 million requests in 15 minutes, and defences rely on an edge CDN and Akamai DDoS filter plus WAF, multi‑level caching, Kubernetes autoscaling and regional data centers to keep the site available. Load resilience is verified with k6 load tests, but failures often come from inside — misconfigured scripts, direct API calls bypassing the CDN, or Firebase rate limits — so prioritization, allow‑lists and event modes are vital.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:10NRK's public role
- 8:17Understanding DDoS attacks
- 9:21Real-time DDoS response
- 16:09Six steps to prevent DDoS
- 27:00Benevolent traffic surges
- 30:35Unexpected traffic spikes
- 40:18Internal DDoS causes
- 46:00Final tips and failures
- 47:02Q&A
related talks
45mAnatomy of a DDoS
40mThe new reality of DDOS
13mDDoS emotions
42mWarding against the Dark Arts: Crafting a Defense Strategy against Botnet DDoS
37mAnatomy of a DDoS
01h 01mReport from the Field: A CDN's Role in Repelling Attacks against Banking...
25mHow to Pull Off a Near Undetectable DDoS Attack...
22mNavigating a cybersecurity event in real time