Skip to content
hannctl
PDF

case-studies mir4-global-azure DESIGN.md

MIR4 Global: massive Azure infrastructure and automated DDoS blocking Design and implementation

Dedicated operation of a global game with 3,500 servers and 650 databases on Azure, plus a pipeline that finds DDoS sources in logs and adds them to an NSG automatically.

3,500 servers · 650 databasesDedicated Host ASeparate fault zonesDedicated Host BSeparate fault zonesDedicated Host CSeparate fault zonesMain engineer
As main engineer, the work covered design advice, incident response, and security audits.
SYN floodAbnormal TCP SYN sourcesAzure DDoS protectionWrites mitigation flow logsLog AnalyticsStores and queries logsScheduled queryFinds abnormal SYN sourcesPowerShellActs on the query resultNSG deny ruleAdds attacker IPs to theruleTraffic blockedNo human in the loopDetection to block, automated · no human step
From detection to block, no human step is needed.
© 2026 Kim JunHyun · Built with Astro · The infrastructure behind this site is code too

↑↓ move · Enter open · Esc close

Choose a theme

Click a badge to switch to that theme on the same content. Dragging only swings it.

Back to the front page →