Cloudflare auto-mitigated world record 3.8 Tbps DDoS attack

Post by theideaofcoffee » Fri, Oct 04, 2024, 5:43 PM UTC

orf wrote: post #11

theideaofcoffee wrote: post #10

Earlier quoted context omitted.

Nah, not really. I know the amount of work standing up even 5% of that requires because I've been there, done that, have the sheet metal scars to prove it. It's a lot of effort. It's just not -hard-. After a while it's a copy-paste problem with it bottle-necking around the human: signing documents, waiting for tickets and whatnot, and it's pretty disingenuous to suggest it's not. And ooh, ooh, I can flippantly dismis…

Is your speculated 11.5gbit per location not a result of their system rather than something to look down on? Yes, anyone can shove a bunch of network equipment into a bunch of cabinets. No, not anyone can shove a bunch of network equipment into a bunch of cabinets and run a service like cloudflare on top of that . And is your argument really “I’ve spun up 16.5 PoP locations before, so I know what I’m talking about?”

Post by orf » Fri, Oct 04, 2024, 10:07 PM UTC

theideaofcoffee wrote: post #12

orf wrote: post #11

Earlier quoted context omitted.

Is your speculated 11.5gbit per location not a result of their system rather than something to look down on? Yes, anyone can shove a bunch of network equipment into a bunch of cabinets. No, not anyone can shove a bunch of network equipment into a bunch of cabinets and run a service like cloudflare on top of that . And is your argument really “I’ve spun up 16.5 PoP locations before, so I know what I’m talking about?”

> And is your argument really “I’ve spun up 16.5 PoP locations before, so I know what I’m talking about?” Actually quite a few more than that, but yes.

Post by orf » Sat, Oct 05, 2024, 1:59 AM UTC

theideaofcoffee wrote: post #15

orf wrote: post #14

Earlier quoted context omitted.

Then you must know how terrible that argument is

Who cares about justifying an argument to an internet forum when all that cash is being dropped in my account.

Post by suprjami » Sat, Oct 05, 2024, 2:40 PM UTC

psd1 wrote: post #17

suprjami wrote: post #13

Earlier quoted context omitted.

What "perverse incentives" do you think they have? They have a product. This is marketing for that product. The incentive is to make money. It's very clear imo.

CF sells treatment, not cure, for ddos. They are a major player in internet technology. I presume that fora exist for players to discuss blue-team strategy, and that decisions are nuanced and detailed. If so, there's a lot of leeway to pursue a hidden agenda. I'm not so concerned about what their doing now. It's about in a few years, when stock isn't as strong and MBAs are parachuted in to perk up the bottom line.

Post by suprjami » Sun, Oct 06, 2024, 10:22 PM UTC

psd1 wrote: post #19

suprjami wrote: post #18

Earlier quoted context omitted.

How do you suggest CloudFlare "cure" DDoS? Wouldn't that mean finding the people who make the decision to do this and physically stop them? They're a CDN not the Mafia.

I never suggested anything so simplistic. Imagine some replacement for tcp is proposed and a working group is set up to develop it. A member of that group might advocate for or against features. You could take the position "we should not include Feature X because it will have a performance impact in Scenario Y". Scenario Y may or may not be real, but it doesn't matter, because you're using it as a stalking horse to g…