
10/24/2019 · Omer Yoachimik
What this post added
This post details the dogfooding of Cloudflare's Magic Transit service by intentionally DDoS'ing the company's Austin office. It highlights how Magic Transit, by announcing IP prefixes via BGP and routing traffic to Cloudflare's global network edge, provides always-on DDoS mitigation and network acceleration for entire network infrastructures. The post demonstrates the effectiveness of the system's multi-layered protection, including XDP, eBPF, iptables, and dynamic rule generation by Gatebot and the newly deployed DoSD, in detecting and mitigating attacks in near real-time with minimal service degradation.