ddos-mitigation

Implement multi-layer DDoS defense for web services and APIs.

Updated Mar 29, 2026

Search Tags:#cdn #web-security #rate-limiting #waf #mitigation #incident-response #ddos

Ready to run

npx skills add https://github.com/marquesfelip/agents-and-skills --skill ddos-mitigation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ddos-mitigation
Source: https://github.com/marquesfelip/agents-and-skills/tree/main/skills/ddos-mitigation
Command: npx skills add https://github.com/marquesfelip/agents-and-skills --skill ddos-mitigation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

DDoS Mitigation Specialist provides a structured playbook and guidance to protect web services and APIs from distributed denial-of-service attacks, helping teams maintain availability under flood conditions.

Core Features & Use Cases

Multi-layer defense strategy including CDN scrubbing, WAF, rate limiting, and load balancing to maintain availability during traffic floods.
Incident response playbooks, monitoring signals, and recovery steps for rapid containment and restoration.
Architecture guidance for defense-in-depth, DNS considerations, and fault-tolerant deployment across cloud and on-prem environments.

Quick Start

Implement a basic DDoS mitigation plan by enabling edge protection, configuring edge rate limits, and setting up timeouts and circuit breakers for critical services.

Frequently Asked Questions about ddos-mitigation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I protect web services from DDoS attacks using multi-layer defense?▼

Protect web services from DDoS attacks by implementing a multi-layer defense strategy that combines CDN scrubbing, WAF configurations, application rate limiting, and load balancing to maintain availability during traffic floods.

What is a DDoS mitigation playbook for maintaining API availability?▼

A DDoS mitigation playbook is a structured incident response guide covering monitoring signals, containment steps, and recovery procedures to rapidly restore API and web service availability during distributed denial-of-service attacks.

Can I apply DDoS mitigation strategies across both cloud and on-prem environments?▼

Yes, DDoS mitigation strategies apply across both cloud and on-prem environments, providing architecture guidance for defense-in-depth, DNS resiliency, and fault-tolerant deployment to maintain service availability under flood conditions.

What's the best way to start configuring rate limiting and edge protection for traffic floods?▼

Start configuring rate limiting and edge protection by enabling CDN scrubbing, configuring edge rate limits, and setting up timeouts and circuit breakers for critical services to quickly implement a basic DDoS mitigation plan.

Why does DNS resiliency matter in a defense-in-depth DDoS architecture?▼

DNS resiliency matters in defense-in-depth DDoS architecture because DNS configurations ensure traffic routing remains stable during flood conditions, enabling failover planning and maintaining availability when primary services are targeted.

What are the limitations of relying solely on WAF for DDoS incident response?▼

Relying solely on WAF for DDoS incident response is limited because WAF alone cannot handle volumetric traffic floods; a complete strategy requires CDN scrubbing, rate limiting, load balancing, and failover planning for full availability protection.