Google mitigated the largest DDoS attack to date, peaking above 398M rps

Re:Google mitigated the largest DDoS attack to date, peaking... by southernplaces7 on Tuesday October 10, 2023 @11:46PM (#37840644)

If this attack takes only 20,000 machines to orchestrate, how is it the "largest DDoS attack to date"? It was to my understanding that some botnets and organizations have placed far more than 20,000 machines under their control before or currently. Could you explain a bit better?

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by xnx on Wednesday October 11, 2023 @12:19AM (#37840836)

I think they're measuring "largest" by the number of requests per second.

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by southernplaces7 on Wednesday October 11, 2023 @12:46PM (#37846839)

But that's part of my question. If other botnets have previously been created with many more than 20,000 controlled machines, why has nobody else before orchestrated an attack with so many requests if it only requires 20,000 machines or so to pull off?

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by xnx on Wednesday October 11, 2023 @01:45PM (#37847755)

This is exploiting a new technique. This technique wasn't known previously, or wasn't viable when HTTP/2 wasn't widespread. This technique is a ~100x multiplier on the impact any size botnet can have. A previous botnet might have needed 20,000,000 machines to achieve the same impact.

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by southernplaces7 on Wednesday October 11, 2023 @02:41PM (#37848545)

Thanks for explaining in such a straightforward way, appreciated!

[ Parent | on HN ]