55 years, 3 months ago

How Netflix DDoS’d Itself To Help Protect the Entire Internet

In June 2016, Netflix security engineer Scott Behrens ran a massive infrastructure test on the streaming system in front of dozens of coworkers. Behrens, working with cloud security engineer Jeremy Heffner and others, had successfully shown that Netflix was in fact vulnerable to an unorthodox type of distributed denial of service attack. The process also helps ensure that Netflix can continue to provide service to its customers even if one of its regions goes down or experiences problems; during a Chaos Kong all user traffic gets rerouted from a particular region, ideally without customers noticing. But Behrens says that Netflix's application security team works to stay two steps ahead of attackers, so even such a small percentage merited closer examination. Only those that use an "API gateway" microservices architecture—the iceberg approach, where the internet-connected interface is the small portal to a huge array of services underneath—like Netflix would be so vulnerable to it.

Wired

Discover Related