Cloudflare thwarts 17.2M rps DDoS attack — the largest ever reported
Aug 19, 2021Omer Yoachimik

Summary
This post details the detection and mitigation of a record-breaking 17.2 million rps DDoS attack by Cloudflare's autonomous edge DDoS protection systems. It highlights the role of the 'dosd' daemon in analyzing traffic samples out-of-path, generating real-time mitigation rules, and propagating them to optimal stack locations (e.g., L4 iptables) for efficient mitigation. The post also discusses the resurgence of Mirai and other botnets, providing statistics on attack volumes and sources, and emphasizes the importance of always-on, automated protection for businesses and IoT devices.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack