In the last few years, it has been observed that the number of distributed network attacks (DDoS) has increased and their size has increased exponentially. Increasing attacks can make the system to which the attacks are directed unresponsive, and also cause the users of the relevant system to be unable to see their jobs. In this context, it is explained that a Google Cloud Armor customer suffered the largest HTTPS DDoS attack ever seen, but Armor protected it.
According to Google, thanks to the Cloud Armor Adaptive Protection protection, the attack was noticed in the early stages and with a series of measures taken, it was ensured that the customer remained online and continued to provide services.
An urgent update has been released for the Google Chrome browser
46 million requests per second
According to Google, on June 1, the Cloud Armor customer was targeted in a series of HTTPS DDoS attacks that peaked at 46 million requests per second. This is 76 percent larger than the largest known DDoS attack ever. To give an idea of the scale of the attack, it can be explained as Wikipedia, one of the most trafficked sites in the world, responds to all of its daily traffic in just 10 seconds.
According to the reports, the system, which received more than 10,000 requests per second (RPS) at the beginning of the attack, encountered 100,000 requests per second after eight minutes. In the following minutes, the DDoS attack peaked at 46 million rps per second.
The attack was made from 132 countries
Researchers from Google revealed that in the HTTPS-based DDoS attack, traffic was made from 5,256 IP addresses located in 132 countries. The encrypted requests sent indicate that the attack was not made by amateurs and that powerful systems were used. Google reports that the attack took place with Meris botnets and that this system had similar DDoS records before.
Cloudflare says there was a 175% increase in such incidents in the fourth quarter of 2021. On the other hand, Microsoft managed to thwart the largest DDoS attack ever (not to be confused with HTTPS DDoS), reaching 3.47 terabits per second.