All glossary terms
Glossary

Layer 7 DDoS

A Layer 7 (application-layer) DDoS attack floods an application with requests that look legitimate, such as page loads, searches or API calls, to exhaust servers or run up costs.

Network-layer DDoS attacks send raw volume and are absorbed by CDNs. Layer 7 attacks send fewer but more expensive requests, each of which reaches application logic or the database.

Mitigation combines rate limits, bot detection and caching, tuned per endpoint. Badly tuned protection either lets the attack through or blocks real users during traffic spikes such as sales or launches.

Where Huskeys fits

Huskeys identifies which endpoints are exposed to costly request floods and recommends per-endpoint protection.

Related terms

Further reading