We had 3 blocks of 10 minutes of degraded performance on our WAF/CDN cluster xx11 early this morning (between 6:30am and 8am pacific time). It affected customers using our Anycast IP address 18.104.22.168 and 22.214.171.124.
The problem was caused by a very large layer 7 DDoS (http flood) combined with a very large layer 3 (syn flood) attack. Our team was able to respond and mitigate the attacks very quickly, but our datacenters in Europe and West/East of the USA had 3x10minutes of degraded performance and very high response time.
We apologize for the incident and our team had put some additional rules in place to prevent that from happening again.
Posted almost 2 years ago. Sep 07, 2017 - 15:05 UTC