
10/1/2021 · Omer Yoachimik, Alex Forster
What this post added
This post details the rise of VoIP DDoS attacks, explaining how attackers exploit UDP and SIP protocols to overwhelm VoIP servers. It highlights Cloudflare's Magic Transit service and its Anycast architecture for mitigating these attacks without impacting latency. The post also describes the use of XDP for wire-speed packet dropping and the development of specific mitigation rules for UDP traffic to identify and drop invalid SIP traffic, ensuring the protection of VoIP services.