Massive 11.5 Tbps UDP Flood DDoS Attack Originated From Google Cloud
Cloudflare has announced that it successfully mitigated a Distributed Denial-of-Service (DDoS) attack that reached a peak of 11.5 terabits per second (Tbps). This incident marks a new record for network bandwidth consumed by malicious traffic.
Cloudflare has announced that it successfully mitigated a Distributed Denial-of-Service (DDoS) attack that reached a peak of 11.5 terabits per second (Tbps). This incident marks a new record for network bandwidth consumed by malicious traffic.
The attack was identified as a hyper-volumetric UDP flood and lasted for 35 seconds. It primarily utilized compromised resources on the Google Cloud Platform.
Cloudflare's automated systems detected a rapid increase in traffic to over 11 Tbps within 10 seconds. The systems then applied targeted rate-limiting rules and IP-based filtering to manage the flow of User Datagram Protocol (UDP) packets.
A graphical analysis showed the rapid escalation of the attack and its immediate decline due to the implemented defenses.
This incident marks a new record for network bandwidth consumed by malicious traffic.
The attack leveraged public cloud infrastructures, utilizing virtual machines and container instances within Google Cloud to form large botnets. Unlike TCP-based attacks, UDP flood attacks exploit the stateless nature of the protocol, which can overwhelm servers by forcing them to allocate resources for each incoming packet.
This incident is part of a broader trend of hyper-volumetric DDoS campaigns. Cloudflare's network has recently blocked hundreds of DDoS attempts exceeding 1 Tbps, including another attack producing 5.1 billion packets per second (Bpps).
Experts warn that DDoS attacks are growing in both scale and frequency. Public cloud infrastructures, with their pay-as-you-go billing models, are attractive targets for launching such large-scale attacks.
Cloudflare has committed to transparency and plans to release a detailed report on the attack's origins and the mitigation strategies used. This report aims to aid network operators, cloud service providers, and security teams in strengthening their defenses against future threats.
As online services play an increasingly vital role in commerce and communication, the need for robust DDoS protection continues to escalate. Cloudflare's response to this 11.5 Tbps UDP flood highlights the importance of automated, cloud-scale security platforms in addressing high-velocity attacks.
Based on reporting by GBHackers.
