{"type":"excalidraw","version":2,"source":"https://AwesomeSystemDesign.dev","elements":[{"angle":0,"strokeColor":"#6577aa","backgroundColor":"#eef1fc","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-1"],"frameId":null,"roundness":null,"boundElements":[{"type":"text","id":"shape-1"}],"updated":0,"link":null,"locked":false,"id":"shape-0","type":"rectangle","seed":41,"x":16,"y":16,"width":288,"height":68,"customData":{"revealStep":1}},{"angle":0,"strokeColor":"#394557","backgroundColor":"transparent","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-1"],"frameId":null,"roundness":null,"boundElements":null,"updated":0,"link":null,"locked":false,"id":"shape-1","type":"text","seed":114,"x":36,"y":35.7,"width":248,"height":28.6,"fontSize":22,"fontFamily":1,"text":"CDN as DDoS Shield","originalText":"CDN as DDoS Shield","textAlign":"left","verticalAlign":"middle","containerId":"shape-0","lineHeight":1.3,"autoResize":false,"customData":{"revealStep":1}},{"angle":0,"strokeColor":"#628572","backgroundColor":"#edf5ee","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-2"],"frameId":null,"roundness":null,"boundElements":[{"type":"text","id":"shape-3"}],"updated":0,"link":null,"locked":false,"id":"shape-2","type":"rectangle","seed":187,"x":16,"y":128,"width":288,"height":493.6,"customData":{"revealStep":2}},{"angle":0,"strokeColor":"#394557","backgroundColor":"transparent","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-2"],"frameId":null,"roundness":null,"boundElements":null,"updated":0,"link":null,"locked":false,"id":"shape-3","type":"text","seed":260,"x":36,"y":146,"width":248,"height":457.6,"fontSize":22,"fontFamily":1,"text":"Layer 3/4\n(Network/Transport):\n• Anycast absorbs\nvolumetric attacks\nacross 250+ PoPs\n• Each PoP has Tbps\ncapacity — attack\nis diluted\n• BGP Flowspec\ndrops known-bad\ntraffic at network\nlevel\n• SYN flood mitigation\nvia SYN cookies\n• UDP amplification\nfiltering","originalText":"Layer 3/4\n(Network/Transport):\n• Anycast absorbs\nvolumetric attacks\nacross 250+ PoPs\n• Each PoP has Tbps\ncapacity — attack\nis diluted\n• BGP Flowspec\ndrops known-bad\ntraffic at network\nlevel\n• SYN flood mitigation\nvia SYN cookies\n• UDP amplification\nfiltering","textAlign":"left","verticalAlign":"middle","containerId":"shape-2","lineHeight":1.3,"autoResize":false,"customData":{"revealStep":2}},{"angle":0,"strokeColor":"#a68a53","backgroundColor":"#fff7e6","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-3"],"frameId":null,"roundness":null,"boundElements":[{"type":"text","id":"shape-5"}],"updated":0,"link":null,"locked":false,"id":"shape-4","type":"rectangle","seed":333,"x":16,"y":665.6,"width":288,"height":493.6,"customData":{"revealStep":3}},{"angle":0,"strokeColor":"#394557","backgroundColor":"transparent","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-3"],"frameId":null,"roundness":null,"boundElements":null,"updated":0,"link":null,"locked":false,"id":"shape-5","type":"text","seed":406,"x":36,"y":683.6,"width":248,"height":457.6,"fontSize":22,"fontFamily":1,"text":"Layer 7 (Application):\n• Rate limiting per\nIP, per customer, per\npath\n• JavaScript\nchallenge for\nsuspicious clients\n• CAPTCHA for\nrepeated failures\n• Bot detection (TLS\nfingerprint, behavior\nanalysis)\n• IP reputation\ndatabase (updated\nreal-time across all\nPoPs)","originalText":"Layer 7 (Application):\n• Rate limiting per\nIP, per customer, per\npath\n• JavaScript\nchallenge for\nsuspicious clients\n• CAPTCHA for\nrepeated failures\n• Bot detection (TLS\nfingerprint, behavior\nanalysis)\n• IP reputation\ndatabase (updated\nreal-time across all\nPoPs)","textAlign":"left","verticalAlign":"middle","containerId":"shape-4","lineHeight":1.3,"autoResize":false,"customData":{"revealStep":3}},{"angle":0,"strokeColor":"#9180ac","backgroundColor":"#f4effb","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-4"],"frameId":null,"roundness":null,"boundElements":[{"type":"text","id":"shape-7"}],"updated":0,"link":null,"locked":false,"id":"shape-6","type":"rectangle","seed":479,"x":16,"y":1203.2,"width":288,"height":322,"customData":{"revealStep":4}},{"angle":0,"strokeColor":"#394557","backgroundColor":"transparent","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-4"],"frameId":null,"roundness":null,"boundElements":null,"updated":0,"link":null,"locked":false,"id":"shape-7","type":"text","seed":552,"x":36,"y":1221.2,"width":248,"height":286,"fontSize":22,"fontFamily":1,"text":"Scale:\n• 250 PoPs × 1 Tbps\neach = 250+ Tbps\ntotal absorption\n• Largest recorded\nDDoS: ~5.6 Tbps\n(Cloudflare, 2024)\n• CDN architecture\ninherently distributes\nthe attack","originalText":"Scale:\n• 250 PoPs × 1 Tbps\neach = 250+ Tbps\ntotal absorption\n• Largest recorded\nDDoS: ~5.6 Tbps\n(Cloudflare, 2024)\n• CDN architecture\ninherently distributes\nthe attack","textAlign":"left","verticalAlign":"middle","containerId":"shape-6","lineHeight":1.3,"autoResize":false,"customData":{"revealStep":4}},{"angle":0,"strokeColor":"#6577aa","backgroundColor":"#eef1fc","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-5"],"frameId":null,"roundness":null,"boundElements":[{"type":"text","id":"shape-9"}],"updated":0,"link":null,"locked":false,"id":"shape-8","type":"rectangle","seed":625,"x":16,"y":1569.2,"width":288,"height":236.20000000000002,"customData":{"revealStep":5}},{"angle":0,"strokeColor":"#394557","backgroundColor":"transparent","fillStyle":"solid","strokeWidth":1.5,"strokeStyle":"solid","roughness":0.7,"opacity":100,"version":1,"versionNonce":1,"isDeleted":false,"groupIds":["step-5"],"frameId":null,"roundness":null,"boundElements":null,"updated":0,"link":null,"locked":false,"id":"shape-9","type":"text","seed":698,"x":36,"y":1587.2,"width":248,"height":200.20000000000002,"fontSize":22,"fontFamily":1,"text":"Key insight: CDN IS\nthe DDoS solution.\nTraffic hits the\nedge, not the origin.\nBad traffic is\nfiltered; good traffic\nis served from cache.","originalText":"Key insight: CDN IS\nthe DDoS solution.\nTraffic hits the\nedge, not the origin.\nBad traffic is\nfiltered; good traffic\nis served from cache.","textAlign":"left","verticalAlign":"middle","containerId":"shape-8","lineHeight":1.3,"autoResize":false,"customData":{"revealStep":5}}],"appState":{"viewBackgroundColor":"#fbfbf8","gridSize":null},"files":{}}