Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack
Feb 13, 2023Omer Yoachimik, Julien Desgats, Alex Forster
Summary
This post details Cloudflare's mitigation of a record-breaking 71 million requests per second (rps) HTTP/2-based DDoS attack. It highlights the scale of the attack, its origin from over 30,000 IP addresses, and the types of targeted websites. The post also announces a free Botnet threat feed for service providers and provides recommendations for customers to optimize their DDoS protection, including enabling managed rulesets, adaptive DDoS protection, firewall and rate limiting rules, securing origin servers, leveraging managed IP lists and bot scores, enabling caching, and utilizing DDoS alerting.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack