Today we mitigated 1.1.1.1

This post details an incident where Cloudflare's internal DDoS mitigation system, Gatebot, mistakenly identified legitimate traffic to the 1.1.1.1 DNS resolver as an attack due to a new integration with the Provision API. This led to a 17-minute outage of the 1.1.1.1 service. The post highlights the complexity of Gatebot's reactive automation stage and the importance of thorough testing when integrating new systems, especially those that interact with critical infrastructure like DNS resolvers. It underscores a lesson learned in improving internal systems and testing procedures for future mitigation efforts.