Category: IT|Oct 12, 2023 | Author: Admin

398 million requests per second

• ddos
• cloudflare
• permalink

Share on

 Facebook |  X |  LinkedIn |  Reddit

A new type of DDoS attack unfortunately makes it possible for attack groups to send record traffic in the direction of servers they want to crack. This time it went well, but the fear is a far greater attack.

The two biggest attacks have occurred in the last two months

The technique dubbed "HTTP/2 Rapid Reset" has been in use since August.

 

The coordinated attack against Amazon Web Services, Google, and Cloudflare saw attacks with up to 155 million requests per second against Amazon, 201 million RPS (“Requests Per Second”) against Cloudflare and a record 398 million RPS against Google. The technique is performed by exploiting a still-unpatched flaw, CVE-2023-44487, in the HTTP/2 protocol.

 

In general, DDoS attacks attempt to disrupt websites and services on the Internet, making them unreachable. Attackers direct overwhelming amounts of Internet traffic to the targets, which can negate the ability to process incoming requests.

 

 

The botnet wasn't even that big
Not only is the bug not fixed, but Cloudflare is concerned not only because the attack is three times bigger than the previous record in February 2023 with 71 million RPS, but that the people behind the attack “only” needed a 20,000 botnet. Cloudflare points out that there are botnets with hundreds of thousands of machines, even millions of them.

 

This was a new attack vector on an unprecedented scale, but Cloudflare's existing protections were largely able to absorb the brunt of the attacks. Although we initially saw some impact on customer traffic—affecting approximately 1 percent of requests during the first wave of attacks—we have today been able to refine our measures to stop the attack for any Cloudflare customer without has affected our systems.

 

The company warns that the web, which generates a total of 1 to 3 billion requests per second, may experience where just as many requests are directed to a smaller number of targets. The question then is whether Google and Cloudflare manage to avoid longer downtime.

 

Comments: