Hey, hi @jkarneges, can you share some articles, I can go through. I have been using Tornado on the backend and Nginx as the downstream. Now I have integrated pushpin with the backend and Nginx makes http_upgrade to pushpin. There are some concerns about DDoS in the application, so I need to be handling that to some extent. It would be great if anybody can share some articles or something related to security and auth for WebSockets. Thanks.