From the NordicCDN blog
Performance, caching, security and the craft of running a fast website or webshop.
Proof-of-work challenges: stopping bots without annoying humans
Nobody enjoys clicking traffic lights to prove they are human. Proof-of-work challenges take a different approach: make the work invisible to you and expensive for whoever is sending a million requests.
Read more →
Rate limiting explained: protect your API without blocking real users
Rate limiting stops one bad actor — or one buggy script — from hammering your site into the ground, without slamming the door on everyone else. Choosing the limits is the hard part.
Read more →
DDoS protection basics for small sites and shops
DDoS attacks are not just a problem for banks and game studios — small sites get caught in the blast radius constantly. How they work, and what to actually do when one starts.
Read more →
What is a WAF, and does your site really need one?
A web application firewall sounds like enterprise overkill until the day it quietly blocks the attack that would have ruined your week. What a WAF does, what it cannot do, and who actually needs one.
Read more →
How to stop bots and scrapers from eating your bandwidth
A surprising slice of your traffic is robots, and not the good kind. How to spot the scrapers eating your bandwidth, tell them apart from Google, and shut them out at the edge.
Read more →