Google Cloud has reported to block a massive DDoS attack against one of its Cloud customers. The customer was using Google’s Cloud Armor DDoS protection service which helped the customer block the largest DDoS attack that peaked at 46 million requests per second (rps). Google says that it is largest the ever attack on Layer 7.
As per the detailed report, Attackers send HTTPS requests starting at 10,000 rps and scaled it to 100,000 within minutes. In a few minutes, the attack peaked at a whopping 46 million rps. To give you an idea of how big this attack was, the attackers send the traffic equivalent to an entire day’s worth of Wikipedia visits in just 10 seconds.
The website that faced the attack deployed Google’s Cloud Armor recommended rule into their security policy. It helped them immediately block the attack traffic. The attack lasts for around 69 minutes. Google says that the attack was performed from 5,256 source IP addresses across 132 countries. The attack also leveraged encrypted requests (HTTPS).
Back in June 2022, Cloudflare claimed to block the largest HTTPS DDoS attack. The recent attack blocked by Google was more than 1.5 times the size of that attack.
