170+ Technical Deep-Dives
Comprehensive engineering technical breakdowns covering low-level kernel performance, Anycast routing, eBPF scrubbing, and high-availability database architecture.
UDP Reflection Protection: Rate Limiting and Payload Inspection with DPDK
Comprehensive technical breakdown of udp reflection protection: rate limiting and payload inspection with dpdk. Written by Rishith Lal for ArzenLabs systems research.
DPDK Packet Processing Framework: Zero-Copy Packet Capture for Threat Analysis
Comprehensive technical breakdown of dpdk packet processing framework: zero-copy packet capture for threat analysis. Written by Rishith Lal for ArzenLabs systems research.
eBPF / XDP DDoS Mitigation: Mitigating 100Mpps SYN Floods at the NIC Layer
Comprehensive technical breakdown of ebpf / xdp ddos mitigation: mitigating 100mpps syn floods at the nic layer. Written by Rishith Lal for ArzenLabs systems research.
BGP Anycast Health Checking and Dynamic Route Withdrawal via ExaBGP
Comprehensive technical breakdown of bgp anycast health checking and dynamic route withdrawal via exabgp. Written by Rishith Lal for ArzenLabs systems research.
FastNetMon Advanced Deployment for Automated BGP Blackholing and Flowspec
Comprehensive technical breakdown of fastnetmon advanced deployment for automated bgp blackholing and flowspec. Written by Rishith Lal for ArzenLabs systems research.
GRE Tunnel Termination for Off-Premises DDoS Scrubbing Traffic
Comprehensive technical breakdown of gre tunnel termination for off-premises ddos scrubbing traffic. Written by Rishith Lal for ArzenLabs systems research.
HTTP/2 Rapid Reset (CVE-2023-44487) Deep Analysis and Server Mitigation
Comprehensive technical breakdown of http/2 rapid reset (cve-2023-44487) deep analysis and server mitigation. Written by Rishith Lal for ArzenLabs systems research.
Layer 7 Bot Mitigation: Challenge Pages, JA3/JA4 Fingerprinting, and WAF Rules
Comprehensive technical breakdown of layer 7 bot mitigation: challenge pages, ja3/ja4 fingerprinting, and waf rules. Written by Rishith Lal for ArzenLabs systems research.
Architecting a Multi-PoP Anycast Scrubbing Center for L3/L4/L7 Protection
Comprehensive technical breakdown of architecting a multi-pop anycast scrubbing center for l3/l4/l7 protection. Written by Rishith Lal for ArzenLabs systems research.
Post-Mortem of a 1.5 Tbps Carpet-Bombing UDP Attack and Lessons Learned
Comprehensive technical breakdown of post-mortem of a 1.5 tbps carpet-bombing udp attack and lessons learned. Written by Rishith Lal for ArzenLabs systems research.
BGP Community Signal-Based Remotely Triggered Blackhole (RTBH) Routing
Comprehensive technical breakdown of bgp community signal-based remotely triggered blackhole (rtbh) routing. Written by Rishith Lal for ArzenLabs systems research.
Scrubbing Center BGP Peering: IXP Connections vs Transit Provider Anycast
Comprehensive technical breakdown of scrubbing center bgp peering: ixp connections vs transit provider anycast. Written by Rishith Lal for ArzenLabs systems research.