Forum Discussion
MaxMedov
Cirrostratus
CirrostratusCustom dynamic signature
Hello, We have a problem with a few clients that, from time to time, spamming us with specific parameter in the body. For example, regular traffic is 10 TPS of parameter ABC, and sometimes those r...
MaxMedovCirrostratus
CirrostratusJeffrey_Granier I've tried to reproduce it today but without success.
I send for about half hour from one client IP requests with this parameter - about 4TPS
and after that, spam with another client IP for about 30-40 TPS for another half hour with this parameter
BADoS has not recognized this as an anomaly; I'm not sure why...
From the documentation, it should detect anomalies of high volume unpredictable traffic and generate a signature tor other mitigations (depending on the conditions)