Itnetic TechnologiesApplication-layer attacks keep evolving, so our edge detection did too. This release adds two adaptive defenses to the DDoS protection pipeline.
Subresource-flood detection. Some attacks avoid loading full pages and instead hammer APIs and static assets — the kind of Accept: */* request floods that slip past navigation-based counters while still overloading your origin. A new detector watches these zero-signal requests per host and trips protection when they cross a safe threshold.
CPU load-shedding. Under an intense flood, the most expensive part of processing each request can starve the event loop and back legitimate connections up. When a node's CPU crosses a ceiling, the proxy now sheds that heavy work automatically, keeping real visitors connected while kernel-level blocks stay in force.
Both defenses trip a short 30-second challenge window locally at the edge, with no round-trip to the control plane, so the response is immediate. Read the incident-response playbook in How to stop a DDoS attack.