WWNIT SOLUTIONS
RUEN

Hi! I'm Ivan.

I build services and automate processes. I help with infrastructure, launch and ongoing support.

Solutions

Service development, infrastructure and automation for a specific challenge.

Cases

Real challenges, the solutions and the project outcomes.

Process

From the first conversation to launch and support.

Journal

Engineering notes and articles from practice.

Research

Technical studies, experiments and scientific publications.

Resume

Work experience, skills and a PDF resume.

Have a project in mind?

Get in touch through Telegram or email.

WWNIT Solutions
RUEN

Cases

Back
WWN
IT SOLUTIONSPROJECT FILE05 / 05

INFRASTRUCTURE SECURITY

Fewer manual actions during a DDoS incident

Scripts for operating protection services, monitoring and a documented response procedure, so an attack does not mean inventing the process from scratch.

01

Challenge

An attack demands several things at once

Engineers need to monitor service health while operating protection tools. When repeated operations are manual, workload rises precisely when a consistent response matters most.

02

Solution

Response actions prepared before an incident

Repeated protection-service operations are handled by scripts, with monitoring, alerts and a documented response procedure. Protection services filter traffic, while automation helps the team operate them through their APIs.

03

In practice

From a problem signal to prepared actions

An engineer follows the prepared procedure and launches the required operations. Scripts carry out repeated actions through the protection services’ APIs.

  1. Monitoring reports a problem through an alert.

  2. The engineer selects actions using the documented response procedure.

  3. Prepared scripts operate the protection services while monitoring helps track system health.

Technical diagram and tools
Technical diagramLOGICAL CONNECTIONS

→ action or data flow · — functional relationship. Repeated blocks refer to the same component.

Service traffic

  1. Incoming trafficService requests
    Filtering
  2. Anti-DDoSProtection services
    Filtered traffic
  3. ApplicationsProduction system

Detection

  1. Anti-DDoSProtection services
    Health signals
  2. MonitoringAlerts and diagnostics

Response

  1. MonitoringAlerts and diagnostics
    Alert
  2. Response proceduresOperational guidance
    Engineer actions
  3. APIs & scriptsOperations automation

Protection management

  1. APIs & scriptsOperations automation
    API operations
  2. Anti-DDoSProtection services

Traffic and protection management are separate paths. Runbooks guide the engineer; this diagram does not imply automatic script execution on an alert.

Incoming traffic
Service requests
Anti-DDoS
Protection services
Applications
Production system
APIs & scripts
Operations automation
Monitoring
Alerts and diagnostics
Response procedures
Operational guidance

StormWall · Qrator Labs · APIs · monitoring

04

Outcome

More attention to the incident, less to repeated operations

The amount of manual work during DDoS incidents was reduced. The team has prepared actions and a documented response procedure instead of having to assemble one during an attack.

  • Scripts for protection-service operations.
  • Monitoring and problem alerts.
  • A documented response procedure for the engineer.