DDOS

TPS stands for Transaction per Second. I am not sure if there is a best practice between the two I am in the process of implementing TPS based protection on my critical applications. The parameters are really going to be subject to your application and infrastructure, you need to look at what the TPS is currently and historically for the applications you are planning to protect, so you can determine what is normal and what is peak traffic for said application. One other thing you could look at would be at what point does the application or infrastructure tip over and set your threasholds somewhere between that and your historical high water mark for peak traffic.

 

 

Mike, just out of interest would you know what the definition of a transaction is please?

I think a TPS for this ASM DoS scenario is an HTTP request/response.

 

 

Aaron

I believe it is just defined as a single request so one GET or POST. Technically one page could contain multiple requests with the loading of images, stylesheets, and the like.

Thank you Mike and (as ever) Aaron.