Thai Ticket Major (TTM)

Thai Ticket Major (TTM)

Thai Ticket Major (TTM), established in 1999, is Thailand’s leading ticketing service provider for concerts, theaters, sports, and major events. With more than two decades of experience, TTM has built a strong reputation for reliability and customer trust through diverse sales channels including web, mobile, call center, and nationwide partner branches.

In early 2025, TTM’s “Online Realtime Ticketing System” faced a major challenge during a high-profile concert ticket launch. Traffic peaked at millions of packets per second, with over 80% originating from malicious BOT attacks that attempted to bypass human verification and hoard tickets for resale, and also bringdown the website services. The incident caused service degradation, slow response, and temporary outages impacting user experience, brand image, and revenue.

Thai Ticket Major (TTM), established in 1999, is Thailand’s leading ticketing service provider for concerts, theaters, sports, and major events. With more than two decades of experience, TTM has built a strong reputation for reliability and customer trust through diverse sales channels including web, mobile, call center, and nationwide partner branches.

In early 2025, TTM’s “Online Realtime Ticketing System” faced a major challenge during a high-profile concert ticket launch. Traffic peaked at millions of packets per second, with over 80% originating from malicious BOT attacks that attempted to bypass human verification and hoard tickets for resale, and also bringdown the website services. The incident caused service degradation, slow response, and temporary outages impacting user experience, brand image, and revenue.

Huawei Cloud x Thai Ticket Major

Challenges

Challenges

Massive BOT Attacks Causing Service Disruption and Revenue Loss

During major concert and event ticket sales, the “Online Realtime Ticketing System” experienced peak traffic over 25 million packets per second, the highest request rate recorded historically, of which 80% were BOT-generated traffic. These malicious automated traffics were intended to flood login, booking requests and other vital services, aiming to block and secure large volumes of tickets for secondary market.

 

These malicious activities caused:

•  The high BOT traffic overwhelmed the existing infrastructure, causing system slowdowns, timeouts, and temporary service unavailability.

•  Genuine customers were unable to access the ticketing portal during critical sales windows, leading to reputation damage, social media backlash, and customer trust erosion.

•  The company incurred direct revenue loss from incomplete transactions and indirect losses due to negative user experiences and reduced brand credibility. Also incur direct infrastructure costs to handle the extremely high traffic.

 

TTM urgently required a real-time, intelligent, and scalable protection mechanism to identify and block malicious traffic while ensuring a seamless experience for genuine users.

Why Huawei Cloud?

Why Huawei Cloud?

Solutions

Solutions

 1. Client Access Layer: Users can access TTM’s platform through web browsers, mobile apps, or Xplore app. All requests are routed through Huawei Cloud’s Edge Security and CDN, ensuring low latency and fast content delivery.

2. Security Protection Layer: Incoming traffic passes through multiple protection layers including Edge Security, CDN, and Web Application Firewall (WAF) to block malicious BOTs and DDoS attacks before reaching the backend.

3. Application Layer: Core systems such as CMS, Booking, and Event Management run behind Elastic Load Balancer (ELB) for high availability and scalability, ensuring smooth operations even during peak demand.

4. Data and Middleware Layer: Business data is stored in Relational Database Service, with Redis and Memcache providing high-speed caching for real-time performance.

5. Container & Integration Layer: The CCE (Cloud Container Engine) manages microservices and integrations with external systems via VPN, enabling flexible, cloud-native operations.

6. Monitoring & Backup Layer: Services like Cloud Eye, Log Tank, Security Center, SFS, and CBR provide real-time monitoring, centralized logging, and automatic backup—ensuring full visibility, compliance, and data protection. 

Customer Benefits

Customer Benefits

Guaranteed Service Availability During Peak Traffic

With Huawei Cloud’s integrated Anti-DDoS, CDN, Edge Security and WAF, TTM ensured uninterrupted operations throughout high-demand ticket sales events, successfully handling traffic peaks of up to 25 million packets per second (PPS). The system automatically absorbed and filtered abnormal traffic before it reached backend servers, ensuring that legitimate users could access the ticketing site without interruption. This resilience eliminated downtime during critical events, safeguarding both business continuity and customer trust while maximizing revenue opportunities during limited-time ticket sales.

Enhanced User Experience and Fair Ticket Access

By combining intelligent BOT detection with low-latency CDN acceleration, Huawei Cloud ensured faster, fairer, and more secure ticketing transactions. Genuine users experienced seamless access with reduced page load times, while automated scalping bots were blocked at the edge. The solution protected the integrity of TTM’s ticket distribution, promoted fairness among buyers, and strengthened public confidence in the brand’s digital platform, resulting in higher satisfaction and fewer complaints during high-demand sales.

Strengthened Security Governance and Operational Visibility

Huawei Cloud’s Cloud Eye, WAF analytics, and Security Center provided centralized visibility into security posture and real-time traffic monitoring. TTM’s IT team gained actionable insights into attack trends, traffic anomalies, and performance metrics through AI-powered dashboards. This enabled proactive defense tuning, faster incident response, and continuous improvement of security policies. The result was a more secure, well-governed ticketing platform that aligned with PDPA and cybersecurity best practices enhancing both operational efficiency and compliance assurance.