DDoS Attack Visualizer — Botnets, Queueing Theory & Mitigation

🛡️ DDoS Attack Visualizer

Attacking bots 50 Attack intensity 8 req/s/bot Legitimate traffic 12 req/s Server capacity 150 req/s Mitigations

Rate limiting

Traffic scrubbing

Load balancing

Queue / buffer0 / 50

Requests dropped/s0

Legit success rate100 %

Server statusHealthy

Attack throughput0 req/s

Each bot in the botnet fires requests at the target; total incoming rate λ competes against the server's fixed service rate μ. This is an M/M/1-style queue: while λ < μ the queue stays short, but as λ approaches or exceeds μ, queue length and latency diverge — the hallmark of real queueing-theory overload. Once the buffer is full, new requests are rejected (red) and real users get starved out (grey, timed out). Rate limiting caps each bot's throughput, traffic scrubbing filters requests matching an attack signature, and load balancing splits traffic across multiple server instances to absorb volume — the same techniques real-world anycast/CDN defenses use.

Red = botnet, green = legitimate users, grey/red flashes = timeouts & drops — drag to orbit