Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The largest DDoS attack to date, peaking above 398M rps

cloud.google.com

Post reply on HN
Print view View original

21–30 of 487 posts

Re: The largest DDoS attack to date, peaking above 398M rps

#21

Post by mortallywounded »

dudeinjapan wrote: post #10
oldtownroad wrote: post #5

At a previous company, we were subject to semi-frequent attacks (of a much smaller scale). The operating assumption internally was that it’s a competitor trying to undermine us but it remains a mystery. Anyone involved in these type of attacks (at internet-infrastructure scale or targeting specific companies) brave/crazy enough to create a throwaway account and tell hn about the motivations?

Sure, I’ll spill the beans. Some people think it’s related to Gaza or Ukraine but it’s not. We just really don’t like Google, we are trying to shut it down so we can bring back Altavista.

Sounds like something those dogpile folks would do.

Re: The largest DDoS attack to date, peaking above 398M rps

#22

Post by jruohonen »

sph wrote: post #8

How does DDoS mitigation work? When people say "I put my website behind Cloudflare to mitigate DDoSes", what does it mean exactly? Is it only about having a large enough ingress pipe that you can weather however many Gb/s you are being bombarded with, and still having some spare capacity for legitimate traffic?

CDN/SDN.

Re: The largest DDoS attack to date, peaking above 398M rps

#23

Post by tyingq »

ricardobeat wrote: post #9

No word on the origin of these attacks? This must require massive amounts of hardware, you’d imagine it to be easily traceable unless some kind of botnet.

That's the particularly bad news, this attack does NOT require a really huge botnet.

https://blog.cloudflare.com/zero-day-rapid-reset-http2-recor...

"Furthermore, one crucial thing to note about the record-breaking attack is that it involved a modestly-sized botnet, consisting of roughly 20,000 machines"

Re: The largest DDoS attack to date, peaking above 398M rps

#24

Post by falcor84 »

dudeinjapan wrote: post #10
oldtownroad wrote: post #5

At a previous company, we were subject to semi-frequent attacks (of a much smaller scale). The operating assumption internally was that it’s a competitor trying to undermine us but it remains a mystery. Anyone involved in these type of attacks (at internet-infrastructure scale or targeting specific companies) brave/crazy enough to create a throwaway account and tell hn about the motivations?

Sure, I’ll spill the beans. Some people think it’s related to Gaza or Ukraine but it’s not. We just really don’t like Google, we are trying to shut it down so we can bring back Altavista.

Made me wonder - if Google wasn't there and Altavista was the incumbent, would it be any different, or was the enshittification of search inevitable?

Re: The largest DDoS attack to date, peaking above 398M rps

#25

Post by blagie »

ricardobeat wrote: post #17
danpalmer wrote: post #12

Earlier quoted context omitted.

One could imagine that, given the size, it could be politically or legally sensitive to announce the origin.

The silence is actually already giving it away then, one of four options.

Enumerate, please.

Re: The largest DDoS attack to date, peaking above 398M rps

#26

Post by kps »

dudeinjapan wrote: post #10
oldtownroad wrote: post #5

At a previous company, we were subject to semi-frequent attacks (of a much smaller scale). The operating assumption internally was that it’s a competitor trying to undermine us but it remains a mystery. Anyone involved in these type of attacks (at internet-infrastructure scale or targeting specific companies) brave/crazy enough to create a throwaway account and tell hn about the motivations?

Sure, I’ll spill the beans. Some people think it’s related to Gaza or Ukraine but it’s not. We just really don’t like Google, we are trying to shut it down so we can bring back Altavista.

I miss boolean search operators.

Re: The largest DDoS attack to date, peaking above 398M rps

#28

Post by detaro »

sph wrote: post #8

How does DDoS mitigation work? When people say "I put my website behind Cloudflare to mitigate DDoSes", what does it mean exactly? Is it only about having a large enough ingress pipe that you can weather however many Gb/s you are being bombarded with, and still having some spare capacity for legitimate traffic?

a) Big pipes

b) ability to filter the noise from real traffic as far as possible (i.e. there is little point in taking in a big pipe of DDoS traffic and then just proxying it to the thinner pipe to the real backend - but if you can identify bad traffic you can drop it and not pass it through).

c) being a CDN helps as a side-effect (what the CDN serves doesn't load the backend services, what can be served from the CDN works for users even if the backend is slow or down)

Re: The largest DDoS attack to date, peaking above 398M rps

#29

Post by kps »

falcor84 wrote: post #24
dudeinjapan wrote: post #10

Earlier quoted context omitted.

Sure, I’ll spill the beans. Some people think it’s related to Gaza or Ukraine but it’s not. We just really don’t like Google, we are trying to shut it down so we can bring back Altavista.

Made me wonder - if Google wasn't there and Altavista was the incumbent, would it be any different, or was the enshittification of search inevitable?

Altavista started turning to shit as soon as it was no longer an Alpha demo. That was a major reason Google took off so quickly.
Post reply on HN