What just happened

This origin can serve only 2 distinct client IPs at a time. When you open this page your browser's real IP tries to claim a slot. The 3rd person to open it (a different IP) gets rejected — a genuine overload, no simulation.

…

Run it as a class

1. Phase 1 — no load balancer. Point everyone at this single origin. Only 2 people get in; the rest see the red overload screen with their own IP.
2. Phase 2 — DP WAF in front. Run several identical origins and give DP WAF their URLs (IP Hash algorithm recommended). Everyone reloads — now they're spread across origins and get in. The “Served by origin” value shows which instance answered.

See README.md → “Running the load-balanced class demo” for exact commands.