In a surprising move, Cloudflare announced its intention to offer unlimited DDoS protection at no extra costs during a DDoS attack’s peak.
This is a very bold move as most DDoS mitigation firms make a large chunk of their profits via what’s known as surge protection. An unlimited DDoS protection would eat a chunk of those profits.
What is surge protection? It’s an option kicks in when a DDoS attack reaches its peak and the customer’s protection plan cannot handle all Denial of Service traffic. This option usually comes with a high price attached to it.
If a company cannot afford the surge protection costs, the DDoS attack succeeds and takes down the targeted website.
“The reality is that our network today is at such a scale that we are able to mitigate even the largest DDoS attacks without it impacting other customers,” says Matthew Prince, Cloudflare CEO, who claims Cloudflare can handle DDoS attacks of up to 15 Tbps.
“So today, on the first day of our Birthday Week celebration, we make it official for all our customers: Cloudflare will no longer terminate customers, regardless of the size of the DDoS attacks they receive, regardless of the plan level they use,” Prince adds. “And, unlike the prevailing practice in the industry, we will never jack up your bill after the attack.”
“We call this Unmetered Mitigation. It stems from a basic idea: you shouldn’t have to pay more to be protected from bullies who try and silence you online,” Prince says.
Cloudflare’s technical team published two blog posts explaining how No Scrubs and Gatebot — two of their in-house developed technologies — allow the company to now provide unlimited DDoS (or unmetered) protection.