Open Source software users need to pick better passwords
Internet Under Attack: World’s Largest DDoS Attack Almost Broke The Internet
from the the-hidden-war dept
Update: Gizmodo is calling bullshit on these claims. They’re likely correct that this attack was not a “threat” to the overall internet, but I also believe that Gizmodo is underplaying the potential problems from open resolvers.
We’ve known for a while that there are a number of people out there who really dislike Spamhaus, one of the more well known providers of a blacklist of spam IP addresses. For what it’s worth, there are times when it feels like Spamhaus may go overboard in declaring an IP or range of IP addresses as spammers. And, to some extent, because of that, it seems like some who use the Spamhaus list rely on it a bit too strongly. That said, Spamhaus is doing important work in helping to stop the internet from being overrun with spam, and that’s a good thing. But sometimes those who it pisses off aren’t particularly nice people. Last week, Spamhaus added hosting company Cyberbunker to its spamlist. Someone didn’t like that very much, and thus began a very big DDoS attack using open DNS recursors. Spamhaus went to Cloudflare, who was able to mitigate the worst of the attack.
But… that just lead to round two, in which whoever was behind the DDoS went much, much bigger attacking a bunch of the providers who provide Cloudflare with its bandwidth. Basically, it was massive firepower directed at some key points on the internet. And it was a pretty big deal. Cloudflare’s blog post stays away from getting too expressive about the whole thing, but just the fact that they note the attack came close to “breaking” the internet should get you to wake up.
Tier 1 networks don’t buy bandwidth from anyone, so the majority of the weight of the attack ended up being carried by them. While we don’t have direct visibility into the traffic loads they saw, we have been told by one major Tier 1 provider that they saw more than 300Gbps of attack traffic related to this attack. That would make this attack one of the largest ever reported.