Cloudflare mitigates largest DDoS attack ever
Posted By Iain Fraser - Cybersecurity Journalist
DDoS protection supremo's, CloudFlare have reported on the blog that they have stopped the largest HTTPS DDoS attack on record.
In the post authored by product manager Omer Yoachimik, CloudFlare managed to halt an attack on a CloudFlare user that was sending 26 million (RPS) request per second.
In the post Yoachimik said that the attack “originated mostly from Cloud Service Providers as opposed to Residential Internet Service Providers, indicating the use of hijacked virtual machines and powerful servers to generate the attack — as opposed to much weaker Internet of Things (IoT) devices.”
“To contrast the size of this botnet, we’ve been tracking another much larger but less powerful botnet of over 730,000 devices. The latter, larger botnet wasn’t able to generate more than one million requests per second, i.e. roughly 1.3 requests per second on average per device,” he said.
“Putting it plainly, this botnet was, on average, 4,000 times stronger due to its use of virtual machines and servers.”
In the past twelve months CloudFlare have witnessed one record-breaking attack after the other. Back in August 2021, we disclosed a 17.2M rps HTTP DDoS attack, and more recently in April, a 15M rps HTTPS DDoS attack. All were automatically detected and mitigated by our HTTP DDoS Managed Ruleset which is powered by our autonomous edge DDoS protection system. Learn More/...
About CloudFlare
At Cloudflare, we have our eyes set on an ambitious goal — to help build a better Internet. We believe that with our talented team, smart technology and engaged users we can solve some of the biggest problems on the Internet. Just how big? Learn More/...
