Cloudflare Blocks A Near-2 Tps Multi-Vector DDoS Attack

Published · Nov 16, 2021

Cloudflare successfully blocked a DDoS attack of nearly 2 tps launched by 15,000 bots. This is the largest DDoS attack to hit Cloudflare and yet another incident in a growing trend.

Cloudflare reported the attack in a blog post. The attack occurred in the week of November 8, 2021, and lasted just one minute. The firm automatically detected the problem, which it said is a multivector that combined DNS amplification attacks with UDP floods.

It blocked it by generating a real-time signature that matched the attack patterns to mitigate disaster. In the same blog post, Cloudflare reports that DDoS attacks are on the rise, increasing quarter on quarter.

This type of attack typically overwhelms a service in order to crash it. On average, they can cause between $20,000-$40,000 in damage if they succeed against big services.

DDoS Attacks Grow in Size and Consistency

This year, Microsoft Azure mitigated the biggest DDoS attack in history so far, with it being 2.4 tps. While that is large, it’s not that much bigger than the one Cloudflare just beat. It also isn’t an isolated incident—DDoS attacks are getting bigger and becoming more frequent.

Cloud hosting providers are common targets because of the number of services they host and the chaos that this could cause. DDoS attacks aim to cause damage or serve as diversions while someone slips to install ransomware, for example.

Luckily, Cloudflare and Azure are putting up a good fight, but this is sure to be a back and forth battle. Service providers will have to keep one step ahead and strengthen their tools as attackers inevitably ramp up their efforts.

Garan van Rensburg
Garan van Rensburg

Garan is a writer interested in how tech reshapes the environment, and how the environment reshapes tech. You'll usually find him inoculating against future shock and arguing with bots.