Privacy as Risk Assessment and Risk Mitigation
Rootconf
Rootconf

Privacy as Risk Assessment and Risk Mitigation

Learn how to design organizations that manage risk

All submissions

Ashwath Kumar

@kashk

Amit Mahbubani

Amit Mahbubani

@amitmahbubani

Hold the Door! DDoS Mitigation at Razorpay Scale

Submitted Mar 8, 2022

Razorpay serves over 200K API requests per minute during peak hours on any average day. DDoS attacks on B2B APIs like ours are fairly complex to detect and mitigate. They typically lead to an extreme spike (10X-100X) in request volume thereby choking critical resources, and hence have the potential to impact our services. In order to guarantee a good quality of service to our customers, we’ve made significant investments to allow us to detect, prevent and mitigate these DDoS attacks, which we will cover in our talk.

Our internal API Gateway, based on Kong, acts as the brain that generates rich traffic insights. We used a combination of AWS Shield, traffic insights and data science to identify patterns and anomalies, which are then derived into dynamic thresholds. These thresholds form a feedback loop which either throttle or block bad actors using AWS WAF. We will also talk about how we conducted simulations to battle test these systems and guarantee the effectiveness of the end-to-end solution.

All submissions

Comments

{{ gettext('Login to leave a comment') }}

{{ gettext('Post a comment…') }}
{{ gettext('New comment') }}
{{ formTitle }}

{{ errorMsg }}

{{ gettext('No comments posted yet') }}

Hosted by

Rootconf
Rootconf
We care about site reliability, cloud costs, security and data privacy

Supported by

Omidyar Network India
Omidyar Network India
Omidyar Network India invests in bold entrepreneurs who help create a meaningful life for every Indian, especially the hundreds of millions of Indians in low-income and lower-middle-income populations, ranging from the poorest among us to the existing middle class. To drive empowerment and social i… more
Privacy Mode
Privacy Mode
Deep dives into privacy and security, and understanding needs of the Indian tech ecosystem through guides, research, collaboration, events and conferences. Sponsors: Privacy Mode’s programmes are sponsored by: more