The New DDoS Landscape
Nov 23, 2017Junade Ali

Summary
This post details the evolving landscape of DDoS attacks, noting a significant shift from volumetric network-layer attacks (Layer 3/4) to more sophisticated application-layer attacks. It explains the mechanisms behind botnets, IoT devices, and DNS amplification as sources of attack capacity, and contrasts older mitigation priorities focused on network capacity with the new reality of application-layer threats. The post highlights Cloudflare's 'Unmetered Mitigation' policy as a response to the increasing size and sophistication of attacks, ensuring continuous service availability.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack