How large of a DDoS attack can Cloudflare handle?

Cloudflare's DDoS protection is effective for any attack size and any type of attack (Layer3/4, Layer 7 or DNS). We have no attack cap size and we do not charge overage fees. Common attack size range from 10Gbps to 300Gbps. However, we have seen larger attacks. For example, we had a customer that received an attack that was 800Gbps+. This is highly uncommon and was reported as the largest DDoS in history - Cloudflare mitigated the attack for our customer. You can read about various case studies here:

How to Launch a 65Gbps DDoS, and How to Stop One
Ceasefires Don't End Cyberwars
The DDoS That Almost Broke the Internet
Reflections on reflection (attacks)
Stupidly Simple DDoS Protocol (SSDP) generates 100 Gbps DDoS
Memcrashed - Major amplification attacks from UDP port 11211
The real cause of large DDoS - IP Spoofing

The Cloudflare Network is designed to mitigate DDoS attacks in a variety of ways. You can see a full detailed explanation here.

Other resources:
I'm Under Attack, What do I do?
Which plans include DDoS protection?

Still not finding what you need?

The Cloudflare team is here to help. 95% of questions can be answered using the search tool, but if you can’t find what you need, submit a support request.

Powered by Zendesk