The largest DDoS attack to date, peaking above 398M rps (cloud.google.com)

Article summary

Google mitigated a DDoS attack that peaked at 398 million requests per second, the largest recorded to date. The attack used a novel HTTP/2 "Rapid Reset" technique that leveraged stream multiplexing. Google's DDoS Response Team observed the attack and developed mitigations to protect its services and customers. The attack was part of a larger campaign targeting major infrastructure providers.

Main themes

• DDoS attacks
• HTTP/2 protocol
• Enshittification
• Search engine quality
• Internet infrastructure
• Cybersecurity measures

What commenters say

• The enshittification of search engines is inevitable due to greed and the desire for maximum profit.
• Google's success was partly due to its ability to handle web spam, which other search engines failed to do.
• DDoS attacks can be launched unintentionally, such as through aggressive scraping without rate limiting.
• The HTTP/2 protocol's design allows for certain types of attacks, such as the "Rapid Reset" technique used in this incident.
• Enshittification is a human issue, not a technology issue, and is driven by imagination and desire.
• The tragedy of the commons and other human dilemmas contribute to the enshittification of systems and services.