I will introduce a practical example of dynamic IP blacklist management for DDoS protection in large-scale services, utilizing Nginx and Lua.
From the background of its introduction at LINE STORE, I will explain the latest approach that balances operational cost and scalability, including comparisons of multiple architectures, benchmark results, and centralized configuration management using CentralDogma.