Mitigating a 754 Million PPS DDoS Attack Automatically
Jul 9, 2020Omer Yoachimik
Summary
This post details the automatic mitigation of a 754 million PPS DDoS attack using Cloudflare's Gatebot and dosd systems. It explains the attack vectors (SYN floods, ACK floods, SYN-ACK floods) and the distinction between bit-intensive, packet-intensive, and request-intensive DDoS attacks. It highlights the use of BGP Anycast for global traffic distribution, kernel-level packet dropping for efficiency, and L4 load balancing with Unimog to handle massive packet rates without manual intervention.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack