Rapid mode is one of three detection modes (i.e. normal mode, rapid mode and smart mode) that monitors traffic flow sent from customer routers to provide early attack warnings and subsequently trigger the corresponding mitigation process when the traffic exceeds the product of the pre-defined detection thresholds and 60 seconds. The upside of this mode is its effectiveness of identifying traffic burst or hit-and-run attacks, but the downside a higher false positive rate. In Instant Flood Detection, Time to trigger an alert = High Threshold rate (in bps / pps) * 60_sec Traffic (in bps / pps) Alert level = high