Book a demo
Connect with us to explore our solutions or request a personalized offer
Layered Protection Against Carpet Bombing DDoS Attacks for a Neobank’s IT Infrastructure
22 Apr, 2026 | 3 min
A leading neobank was the target of frequent targeted & carpet bombing DDoS attacks that were extremely hard for ISPs to detect and mitigate.
“In the summer of 2024, we faced the first well-thought-out DDoS attacks: they randomly targeted large amounts of data to our public IP addresses of ISP peering. As a result of these clearly planned actions, our peering connections were disrupted and our Internet channel just collapsed”.
CTO, Neobank
Challenge
In 2024, due to a new wave of large-scale attacks, the client’s cybersecurity engineers decided to implement additional layers of cybersecurity, to take traffic from all uplinks under full control on-premises.
Solution
- Dedicated physical channel for prefiltered internet traffic delivery to neobank IT infrastructure.
- On-premises protection system Strictera NDP that instantly detects network threats on every uplink and minimizes the surface of attacks with custom filtering rules. The Strictera NDP kernel uses XDP and eBPF mechanisms to handle traffic. It allows to block network anomalies in less than 1 s (in Always-on mode) and supports up to 150 million unique traffic control rules. Flexible network instructions that are at the heart of XDP help to repel sophisticated DDoS attacks, which can no longer be mitigated by static filtering rules.
"XDP is familiar to us. We’re already using it for a Kubernetes cluster, for L4 routing and load balancing. Furthermore, the used components, such as logging, monitoring, and peering, are completely understandable to us, unlike solutions from other vendors we tested."
CTO, Neobank
"Strictera NDP is reliable protection for the internet channels that host our service infrastructure: mail and proxy servers, IP telephony, etc. While filtering automated threats can be solved by us internally, protection against volumetric DDoS is impossible without the help of internet providers. By implementing Strictera NDP, we solve both of these problems at once."
CTO, Neobank
Results
- Layered protection of the bank's IT infrastructure from DDoS attacks at L3–L7 from a single vendor.
- High performance and reliability of the protection system: the ability to filter hundreds of Gbps of malicious traffic.
- Flexible traffic filtering settings for each bank service.
"We have multi-layered protection from Strictera. We expect cloud protection to provide high-quality filtering of known DDoS attacks. The Strictera NDP on-premise solution acts as the final filter: we receive continuous traffic cleaning before it reaches our firewall, protect against session exhaustion attacks, and upload our blacklists. We are confident that new, atypical attacks can be filtered through fine-tuned rules."
CTO, Neobank
Book a demo to see Strictera in action
Strictera
Innovative, scalable, and cost-efficient cybersecurity solutions to safeguard your networks, websites, apps, and APIs from evolving threats
Contact us by email:
Call the number:
Book a demo
Connect with us to explore our solutions or request a personalized offer
Table of contents