May I ask who’s calling, please? A recent rise in VoIP DDoS attacks
Oct 1, 2021Omer Yoachimik, Alex Forster
Summary
This post details the rise of VoIP DDoS attacks, explaining how attackers exploit UDP and SIP protocols to overwhelm VoIP servers. It highlights Cloudflare's Magic Transit service and its Anycast architecture for mitigating these attacks without impacting latency. The post also describes the use of XDP for wire-speed packet dropping and the development of specific mitigation rules for UDP traffic to identify and drop invalid SIP traffic, ensuring the protection of VoIP services.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack