Google mitigated the largest DDoS attack to date, peaking above 398M rps

Re:Google mitigated the largest DDoS attack to date, peaking... by ilyt on Tuesday October 10, 2023 @09:34AM (#37831898)

Doesn't really work for those types of attacks

> In this final layer, we filter out attacks in the form of SYN floods, DNS floods, and invalid packets. We are also able to flexibly adapt to other unique attacks and to reliably mitigate them.

Which means any legit http2 connection will go just fine.

Even if such connection now triggers hundreds of substreams.

Push for end to end encrypted internet also means you can't really stop any more advanced attack. You could have just few dozen of hosts doing 20-30 connections each (i.e. "looking perfectly normal" for DDoS protection provider) generating tens of thousands per second in http2 streams.

I'm speaking from experience of mitigating attack like this. Our DDoS provider was near-useless..

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by bombcar on Tuesday October 10, 2023 @10:38AM (#37832689)

For the higher layer attacks you have to have something like the "modified cryptominer in the browser" things that cloud flare and friends do now - those interstitial pages that pop up for a few seconds are doing mathematical hashing to burn processor time on your end - which greatly complicates the ability to DDoS.

[ Parent | on HN ]