←back to thread

How Cloudflare blocked a monumental 7.3 Tbps DDoS attack

(blog.cloudflare.com)
265 points methuselah_in | 4 comments | 20 Jun 25 18:34 UTC | HN request time: 0.001s | source
Show context
losthobbies ◴[24 Jun 25 13:52 UTC] No.44366283[source]▶
Dodgy IoT devices will be the end of us all.
replies(1): >>44366592 #
bearjaws ◴[24 Jun 25 14:22 UTC] No.44366592[source]▶
It's wild to think with the proliferation of 1gbps fiber internet, even a modern pi board or old desktop is a potential 1gbps bot host.
replies(3): >>44366877 #>>44369703 #>>44376673 #
franga2000 ◴[24 Jun 25 19:02 UTC] No.44369703[source]▶
When your IP is found to have been part of a botnet, I think ISPs should just limit you to like 20Mbps for at least a year, so you think twice about buying that 10$ wifi baby monitor next time.
replies(6): >>44370378 #>>44370602 #>>44371379 #>>44380821 #>>44384044 #>>44392890 #
1. hooverd ◴[24 Jun 25 20:20 UTC] No.44370602[source]▶
Thanks to CGNAT you, obviously an upstanding digital citizen, will also have to pay for your neighbor purchasing an IoT toaster.
replies(2): >>44371662 #>>44372263 #
2. BenjiWiebe ◴[24 Jun 25 22:20 UTC] No.44371662[source]▶
Your ISP can tell you apart from your neighbor since they are the ones doing the CGNAT.
3. ycombinatrix ◴[24 Jun 25 23:45 UTC] No.44372263[source]▶
That doesn't make any sense. Who do you think is doing the CGNAT?
replies(1): >>44373735 #
4. hooverd ◴[25 Jun 25 04:55 UTC] No.44373735[source]▶
Yea, it would be bad practice to nuke an IP just because it was implicated in a botnet.