RockCloud-基石云安全-官方博客
RockCloud Blog
Insights on cloud security, DDoS protection, CDN acceleration and reliable infrastructure.
How to Choose a Hong Kong CN2 Server? 6 Criteria to Verify Before Signing
Break down Hong Kong CN2 server selection into two independent capabilities: line quality and DDoS mitigation, providing 6 verifiable criteria covering return-path CN2 validation, peak-hour packet loss, scrubbing mechanisms, blackhole policies, cross-border return routing, and non-HTTP traffic support.
WebSocket Long-Connection DDoS Attack Defense: Four-Gate Configuration
Defending against WebSocket long-connection DDoS attacks hinges on four gates: handshake authentication, per-IP concurrent connection quotas, message rate limiting, and idle heartbeat timeout reclamation, as traditional WAFs lose inspection after the HTTP 101 upgrade.
Seamless High-Defense CDN Onboarding: 6 Steps for Zero-Downtime Migration
Follow this 6-step process to integrate a high-defense CDN without downtime, covering DNS TTL reduction, origin pre-whitelisting, certificate alignment, gray traffic shifting, real IP passthrough, and origin whitelist lockdown.
ACK Flood Attack Characteristics and Defense Strategies: Identification and Response
Learn to identify ACK Flood attacks by recognizing the fingerprint of low inbound bandwidth, high CPU, and RST spikes, and discover effective defense strategies using edge TCP termination and source whitelisting.
Dynamic CAPTCHA in Anti-CC Attack: Which Paths Trigger and What Thresholds
Effective dynamic CAPTCHA in anti-CC requires tiered triggering based on path value, using transparent checks, silent JS challenges, and interactive CAPTCHAs, adjusted automatically by anomaly signals, deployed at the edge, and clearly bounded by rate limiting and edge scrubbing.
