Cloudflare mitigates 26 million request per second DDoS attack
Jun 14, 2022Omer Yoachimik

Summary
This post details the automatic detection and mitigation of a 26 million requests per second HTTPS DDoS attack, the largest on record. It analyzes the attack's origin from a botnet of hijacked virtual machines and powerful servers, contrasting its efficiency with larger, less powerful botnets. The post also discusses the increased computational cost of HTTPS DDoS attacks and provides statistics on the attack's origin countries and networks. It highlights the importance of automated, always-on DDoS protection services.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack