In part one of this series, we took a look at the evolving DDoS landscape, offering a sense of what’s out there in terms of attack size and type to help better inform decisions when it comes to securing your infrastructure. In this post, we’ll share an inside look at how we protect our customers, lessons learned from a real-live DDoS, and our recommended checklist for mitigating attacks.

Open source projects are the foundation of the internet; by sponsoring their important work, we support our vision for unfettered, scalable technical innovation. We’ve supported numerous open source projects since the inception of Fastly, and our founding team has invested time into open source development since our incorporation. Read on to learn about the evolution of our Open Source and Nonprofit Program.

As an edge cloud platform, Fastly is in a unique position to monitor DDoS attack patterns and trends as they evolve. In this post, Jose Nazario, Sr. Director of Security Research, and Ryan Landry, Director of Edge Cloud Operations, take a look back at the history of DDoS, sharing how they’re changing and the trends we’re seeing. Getting a handle on the various shapes and sizes of DDoS will help inform how you address these attacks on your own infrastructure — you may not always be able to predict attacks, but knowing what’s out there and preparing for the worst will help you protect and mitigate.

Fastly’s engineering teams are smart and capable — they architect thoughtfully, write elegant code, and work carefully with incredible complexity and scale. So why would they (or anyone) need quality assurance (QA)? In this post, Senior QA Automation Engineer Alice Nodelman examines how the QA mindset works, touching on our approach to QA at Fastly and sharing how you could apply this mindset to your organization.

In keeping with our security team’s vision for defending the modern web, we launched our Web Application Firewall (WAF) to help our customers secure their sites and applications while providing reliable online experiences for their users. In this post, two of the engineers who built our WAF will take you on a deep dive into the tech behind it, exploring how we built a performant, highly configurable, and comprehensive solution to secure customers’ infrastructure.

Deliberate practice is the act of performing a set of tasks that are just slightly more difficult than what you’re used to, so you can get better at a specific activity and move from a novice to an experienced practitioner. In this post, Security Engineer Sandra Escandor-O’Keefe walks us through the art of deliberate practice, offering tips for novices and mentors alike.

In an effort to move forward from early architecture that we were quickly outgrowing, we recently migrated our Historical Stats database from self-managed MySQL to Google Cloud Bigtable. Read on to learn how we did it (without any downtime).

At Altitude 2016, New York Media’s CTO discussed surviving a massive DDoS and the steps they took to mitigate, gave us a peek inside their stack, and described how New York Media is building a better web, working towards creating a symbiotic relationship between readers, publishers, and advertisers to ensure great experiences for everyone.

At Altitude NYC, *The New York Times* CTO Nick Rockwell gave us a peek inside *The New York Times*’ stack and culture (and how he’s redefined risk from both a corporate and engineering standpoint), and described how they prepare for major events — such as the 2016 presidential election.

Altitude NYC brought together Fastly engineers and industry leaders like The New York Times and Nordstromrack.com | Hautelook to discuss complex problems in security, cloud infrastructure, DevOps, and more. Check out our recap and watch the session videos to learn about the vision behind Fastly, take a look under the hood of a DDoS attack, see what went down on election night at the NYT, and more.

In a previous post, HashiCorp’s Seth Vargo introduced the Terraform infrastructure-as-code tool for building, changing, and versioning infrastructure. In this post, we’ll cover two cases using Terraform with Fastly: first we’ll create and manage an originless service and then we’ll create and manage a Google Compute Engine instance with a Fastly service in front of it.

At Altitude 2016, Software Engineer Alex Russell discussed the latest projects the “performance obsessed” Google Chrome team had underway. In this recap, we’ll take a look at how you can provide reliable offline experiences, how to best reach your users, and avoid the dreaded “Uncanny Valley.”

Our previous post detailed how Fastly started down the slippery slope of network software. By implementing a distributed routing system on commodity switches, we were able to maintain complete control over how we forward packets at a fraction of the cost imposed by conventional networking wisdom.

It’s emotionally damaging to be the victim of a DDoS, to say the least. The technological consequences of an unmitigated DDoS attack can cripple businesses, but the emotional impacts are often ignored. CEO Artur Bergman discusses the five emotional stages of a DDoS attack (and how to mitigate).

In “How to solve anything” parts 1 and 2, we outlined how to use Varnish Configuration Language (VCL) to address some of your more challenging problems. In this post, we’ll discuss how Andrew Betts of the Financial Times uses advanced VCL to securely cache and serve authenticated and authorized content, and set up feature flags.

The Fastly API is an integral part of our CDN — using our APIs, customers are able to instantly reflect configuration changes, purge content, and perform anything that is available on the Fastly control panel from within their application. In this post, Toru discusses our new API authentication method, API tokens.

A/B testing is valuable, aggravating, and everyone has an opinion on the best way to do it. At Fastly, we provide a set of tools to help enable experiments you can integrate into your own analytics.

In “How to solve anything, part 1,” we discussed Andrew Betts’ clever tips for using Fastly’s Custom Varnish Configuration Language (VCL) to collect data at the edge. In this post, we’ll look at how Nikkei uses VCL to deal with a service-oriented architecture as well as write synthetic responses with non-ASCII characters.

Camille Fournier, former CTO of Rent the Runway and self-described senior thinker and raconteur, spoke at Altitude 2016 on her experience in leadership, sharing how she overcame the communication barrier that comes with growth to scale successful, happy teams.

HashiCorp’s Director of Technical Advocacy discusses Terraform, their tool for building, changing, and versioning infrastructure safely and efficiently, and how they use it to codify Fastly configurations.