DDoS Protection Simulator | mysimulator.uk

Attack

Attack intensity 5

Defense layers

Rate limit threshold 6 req

Server status

Health 100%

Server load

Blocked / min

Legit passed / min

Legit blocked / min

How it works

Every particle is one request racing from the edge of the network toward the origin server. Legitimate traffic (green) spawns from many distinct sources at a random pace; botnet traffic (red) spawns from a small, fixed pool of source IDs — a real botnet — and its inter-request timing is machine-regular, not human-random.

loadNow = decay(loadNow) + Σ weight(delivered)
health += (loadNow < 100 ? regen : -k·(loadNow-100))·dt

Rate limiting — counts requests per source in a leaky bucket; once a source crosses the threshold its further requests are dropped at the edge, before they ever reach the server.
Traffic scrubbing — a behavioural filter: requests whose arrival timing is too regular get flagged as automated and dropped in the outer ring, but it also has a small false-positive rate on legitimate traffic.
CAPTCHA challenge — holds surviving requests at an inner ring for a short proof-of-work delay; most remaining bots fail it, while a few real users abandon the wait — the classic security/usability trade-off.
Watch legit blocked: an aggressive defense stack drives it up even as blocked attack traffic climbs — there is no free lunch, only a better operating point.

Legitimate request Botnet request Blocked Active defense ring

⚠ Couldn't load the 3D engineThree.js failed to load from the CDN. Check your connection and reload.