Google mitigated the largest DDoS attack to date, peaking above 398M rps

Re:Google mitigated the largest DDoS attack to date, peaking... by endisneigh on Tuesday October 10, 2023 @08:47AM (#37831363)

Wonder how you could even handle this if you weren’t using a big cloud provider and didn’t have a lot of money to spend.

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by ivanjermakov on Tuesday October 10, 2023 @09:29AM (#37831831)

Patch your HTTP server to mitigate the Rapid Reset attack:

> To mitigate against the non-cancelling variant of this attack, we recommend that HTTP/2 servers should close connections that exceed the concurrent stream limit. This can be either immediately or after some small number of repeat offenses.

https://cloud.google.com/blog/products/identity-security/how...

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by knorker on Tuesday October 10, 2023 @09:59AM (#37832193)

How small a server setup do you mean? This was apparently 20k machines: https://blog.cloudflare.com/zero-day-rapid-reset-http2-recor...

Most web services don't need clever protocol attacks to be downed by 20k machines.

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by tristan9 on Tuesday October 10, 2023 @10:04AM (#37832261)

You can’t. If your webserver receives 400m rps it dies, end if story.

Mitigations are just that, mitigations. They are as effective as buying a better door lock to protect your apartment from a nuke.

[ Parent | on HN ]