HTTP-2 Rapid Reset - Distributed Denial of Service

[Caute_cautim]

Hi All

A new DDoS (distributed denial of service) technique named 'HTTP/2 Rapid Reset' has been actively exploited as a zero-day since August, breaking all previous records in magnitude.

News of the zero-day technique comes as a coordinated announcement today between Amazon Web Services, Cloudflare, and Google, who report mitigating attacks reaching 155 million requests per second (Amazon), 201 million rps (Cloudflare), and a record-breaking 398 million rps (Google).

Google says they were able to mitigate  these new attacks by adding further capacity on the edge of their network.

https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-re...

Regards

Caute_Cautim

[ericgeater]

How widely used is HTTP2?  I think this was the first time I'd heard the term.

Also, Amazon doesn't share much details, but they did write up a response to the event.

[Caute_cautim]

@ericgeaterDark Reading has also issued a follow up too and explanation:  Along with CVE details:

https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event

Regards

Caute_Cautim