←back to thread

How Cloudflare blocked a monumental 7.3 Tbps DDoS attack

(blog.cloudflare.com)
265 points methuselah_in | 2 comments | 20 Jun 25 18:34 UTC | HN request time: 0.414s | source
Show context
londons_explore ◴[24 Jun 25 13:40 UTC] No.44366154[source]▶
A DDoS gets some fraction of the entire internet to attack a single host.

As the internet gets more users and more devices connected, the ratio of DDoS volume to a single connections volume will only get larger.

Is there any kind of solution?

replies(8): >>44366248 #>>44366352 #>>44366379 #>>44366623 #>>44366811 #>>44366991 #>>44367206 #>>44369906 #
blueflow ◴[24 Jun 25 14:25 UTC] No.44366623[source]▶
Make people pay per traffic.
replies(1): >>44367210 #
loloquwowndueo ◴[24 Jun 25 15:22 UTC] No.44367210[source]▶
We already do. Attackers use stolen capacity.
replies(1): >>44367232 #
1. blueflow ◴[24 Jun 25 15:24 UTC] No.44367232[source]▶
But why doesn't the market do the market thing, then?
replies(1): >>44367767 #
2. viraptor ◴[24 Jun 25 16:14 UTC] No.44367767[source]▶
For each separate endpoint the impact is minimal. Being part of the attack would cost you an extra $1 and you wouldn't even notice. On the other hand, ensuring the metering works correctly, reporting to the billing system works, invoicing it properly, providing support, etc. likely costs more per-customer.