How Temporal Powers Salesforce's AI-Driven DDoS Protection
summary
Salesforce builds an AI-driven DDoS system on Temporal that delivers 10× faster first mitigation, 15× faster analysis and 3× faster end-to-end resolution, achieving months of production with zero downtime. Real-time L7 and L3 AI inference labels actors as good/bad/unknown, Temporal orchestrates deterministic workflows with separate workflow and activity workers, and fixes for operational limits include S3 offload + continue-as-new to avoid gRPC 2 MB and replay timeout traps while keeping a human-in-loop for false-positive checks.
AI-written summary · about
chapters (15)
- 0:00Introduction and speakers
- 3:14What is a DDoS attack
- 7:12DDoS threat at Salesforce scale
- 10:26Evaluating solutions for DDoS defense
- 13:42Temporal as the ideal platform
- 15:29DREAM platform architecture
- 18:18End-to-end DDoS mitigation flow
- 20:26AI-driven inference and decision
- 24:01AI in platform development
- 25:47Async IO pitfalls in Temporal
- 28:14Lessons from production deployment
- 31:05Timeout and 2MB wall issues
- 33:11Fixing history bloat and timeouts
- 33:32Operational efficiency gains
- 35:43Final remarks and future outlook
related talks
35mUsing AI to Fuel Digital Transformation & Growth
29mIntelligent Log Analysis and Real-time Anomaly Detection @ Salesforce
17mHarnessing AI for Autonomous Threat Defense in Multi-Cloud Security
31mFighting Digital Threats in the Age of AI
07mThomas Gerber Interview
11mAWS On Air ft. Automatic Application Layer DDoS
04mInterview
11mAI-Powered Cybersecurity in the Age of Advanced Threats