Detect at the edge, learn as a swarm.
RaDome is an autonomous edge defense platform that runs as a single binary on every server. It stops DDoS at the kernel boundary with eBPF/XDP, inspects L7 traffic with an AI-driven WAF, and propagates learned threat intelligence across all nodes via a P2P swarm.
Most edge security tools follow the same decade-old pipeline: packet → rule → decision → drop. This model reacts to individual packets and IPs — it is blind to coordinated campaigns.
Traditional Approach
Traffic from a thousand different IPs sharing the same JA4 fingerprint, exploit chain, and behavioral pattern is handled one by one. The campaign is never seen.
ACSA Cognitive Loop
RaDome learns and neutralizes campaigns — not IPs. Coordinated behavior hidden behind thousands of disposable hosts collapses into a single recognized threat campaign.
From L3 to L7, TLS to WebSocket — complete protection stack.
SYN flood, UDP amplification, ICMP flood, IP fragmentation, and IPv6 attacks are dropped at the kernel boundary. Only clean packets reach the CPU-bound stack.
50 fast rules (Tier-1) + OWASP CRS 4.x deep inspection (Tier-2). SQL injection, XSS, RCE, path traversal, and more.
rustls-based TLS termination — no OpenSSL dependency. Dynamic SNI routing, ACME automatic certificate renewal, JA3/JA4 TLS fingerprinting.
Full reverse-proxy termination. HTTP/3 QUIC, WebSocket, and gRPC — all modern protocols fully supported.
Cookie validation, Proof-of-Work, JavaScript challenge, and tarpit — difficulty auto-adjusts to attack intensity.
5-stage degradation manager triggers at PSI >80%. Automatic step-down from deep WAF inspection to local-only mode, with automatic recovery when load normalizes.
Aşağıdaki simülasyon RaDome'un Hot/Warm/Cold path kararlarını göstermektedir
final_score = rule × 0.5 + ml × 0.3 + behavior × 0.2
Cloudflare, ModSecurity ve AWS WAF karşılaştırması
| Kriter | RaDome★ RaTurka | Cloudflare WAF | ModSecurity | AWS WAF |
|---|---|---|---|---|
| Karar gecikmesi | <50µs hot path | ~1–5ms | ~2–10ms | ~5–20ms |
| Kernel-level DDoS | eBPF/XDP | Kısmen | ||
| P2P tehdit paylaşımı | Gossipsub + DAG-BFT | |||
| Sürü zekası | ||||
| OpenSSL bağımlılığı | Hayır (rustls) | N/A | ||
| OWASP CRS 4.x | ||||
| Graceful degradation | 5-aşamalı PSI | Kısmen | ||
| Self-hosted | ||||
| JA3/JA4 parmak izi | Kısmen |
* Karşılaştırma tahmini verilere dayalıdır. RaDome beta aşamasındadır.
Teknik dökümantasyonu inceleHot / Warm / Cold three separate paths; decision in sub-50µs, learning runs uninterrupted in the background.
Hot Path
<50µsPer-packet / per-request decision. WAF Tier-1 fast rules, eBPF rate limits, reputation lookups. Entirely lock-free, cache-friendly data structures.
Warm Path
msBehavioral scoring, ML anomaly inference, and risk engine fusing rule, ML, and behavior signals into a single decision score.
Cold Path
backgroundLarge-scale ML inference, online training, campaign detection, and model checkpointing on a dedicated OS thread. Findings fed back to hot path via bounded channels.
Risk Score Formula
0 – 29
Allow
30 – 59
Challenge
60 – 79
Rate Limit
80+
Block + XDP Blacklist
<0µs
WAF Karar Gecikmesi
Hot path, kilit yok
0
OpenSSL Bağımlılığı
rustls + aws-lc-rs
0
Bozulma Aşaması
PSI tabanlı graceful degrad.
0binary
Rust Static Binary
Sıfır runtime bağımlılığı
Skor Hesaplama Formülü
Raw customer traffic is never shared. Only signed, anonymous threat telemetry travels the network.
Every threat report is signed with Ed25519. A single compromised node cannot poison the network.
Policy-level updates require threshold signatures. No global rule changes without multi-node consensus.
Lightweight mesh network. Propagates threat deltas to all nodes with minimal bandwidth.
Narwhal-style Byzantine-resistant coordination. Finality guaranteed under 100ms.
Threat deltas are carried as compressed sets with per-threat TTLs. Bandwidth stays minimal.
Node reputation decays daily. Bad actors lose network influence over time.
Profiles are starting points. Every feature can be toggled individually via a single YAML config.
Minimal
1 vCPU / 1 GB RAM
Standard
2–4 vCPU / 2–4 GB RAM
Enterprise
4+ vCPU / 8+ GB RAM
Zero-downtime live reload via SIGHUP — no restart required
Install
radome install --profile standard radome run --config /etc/radome/config.yaml
RaDome is not an add-on — it is a separately billed security layer. Prices to be announced soon.
| RaDome StandardRecommended | RaDome Minimal | RaDome Enterprise | |
|---|---|---|---|
| Monthly Price | $20/ mo | Coming Soon | Coming Soon |
| WAF Tier-2 — OWASP CRS 4.x | |||
| JA3/JA4 TLS Fingerprinting | |||
| AI/ML Anomaly Detection | Shadow ML | Tam Online ML | |
| Challenge Engine | Cookie / PoW / JS | Cookie | Cookie / PoW / JS / Tarpit |
| DAG-BFT Byzantine Consensus | |||
| AF_XDP Zero-copy | |||
| OpenTelemetry Tracing | %1 Örnekleme | Tam İzleme | |
| gRPC Management API | |||
| Multi-tenant Upstream Isolation |
Integrate RaTurka into your production environment in minutes. Deploy the agent with a single command and put operational chaos behind you.
Free plan available — no credit card required.
