What This Project Does and Why It Matters Imagine you run a website. Normally 10 people visit per minute. Suddenly 500 people flood in at once; that could be a DDoS attack trying to crash your site. This project is like a security guard that watches your traffic, learns what "normal" looks like, and automatically blocks attackers. I built this for a Nextcloud server (like Google Drive but self-hosted) using Go programming language. How the Sliding Window Works Think of a sliding window like a moving 60-second bucket. Every new request drops into the right side. Requests older than 60 seconds fall out the left side. At any moment, you know exactly how many requests came in the last 60 seconds; without storing everything forever. I maintain two of these windows: One per IP address (to catch single attackers) One globally (to catch distributed attacks) How the Baseline Learns from Traffic The baseline is the system's memory of "normal." Every second I record how many requests came in.…