Google Blocks Largest Layer 7 DDoS Attack at 46 Million RPS

The FPS Review may receive a commission if you purchase something after clicking a link in this article.

Image: Google

Cloudflare isn’t the only tech giant that’s been successfully fending off massive DDoS attacks.

Per a new post on the Google Cloud Blog, Google claims that it has blocked the largest Layer 7 DDoS attack ever, one that “peaked at 46 million requests per second.” The attack happened on June 1 and targeted a customer of Google Cloud Armor, a service from the company that helps protect “Google Cloud deployments from multiple types of threats, including distributed denial-of-service (DDoS) attacks and application attacks like cross-site scripting (XSS) and SQL injection (SQLi).”

This attack was “at least” 76% larger than the previous DDoS attack record holder, according to Google.

Starting around 9:45 a.m. PT on June 1, 2022, an attack of more than 10,000 requests per second (rps) began targeting our customer’s HTTP/S Load Balancer. Eight minutes later, the attack grew to 100,000 requests per second. Cloud Armor Adaptive Protection detected the attack and generated an alert containing the attack signature by assessing the traffic across several dozen features and attributes. The alert included a recommended rule to block on the malicious signature. The following is the alert showing details of the attack before it ramped to its peaks.

Image: Google

Cloudflare mitigated a 26 million request per second (rps) DDoS attack in June. That was the largest HTTPS DDoS attack on record at the time, beating a 17.2M rps HTTP DDoS attack that happened in August 2021 and a 15M rps HTTPS DDoS attack that happened more recently in April.

Source: Google

Join the discussion in our forums...

Tsing Mui
News poster at The FPS Review.

Recent News