Cloudflare recently stopped an 11.5 Tbps DDoS attack. Just a few months ago, they mitigated a 7.3 Tbps attack. Let’s be realistic: it’s only a matter of time before we see a headline about a 15 Tbps attack being stopped. The scale of these threats is escalating at a frightening pace.

This brings us to a crucial point that I find myself emphasizing constantly: your on-premise perimeter security is no longer a viable strategy. For your most exposed services—your email gateways and your WAF/WAAPI solutions—the only effective defense is in the cloud.

Why? Because trying to fend off a multi-terabit attack from your own data center is a battle you are guaranteed to lose. The attack will saturate your internet connection long before it ever reaches your expensive on-premise appliance. There is no need to have your infrastructure “stressed” by an attack it was never designed to handle.

The smartest choice is to move the battlefield. Let cloud providers, with their massive, globally distributed networks, absorb the blow. It’s time to stop investing in a defense that can’t possibly work and migrate your perimeter security to where it can actually be effective: the cloud.

Author: Alexey Shulenkov (Cybersecurity Solutions Consultant, DAAC digital)

For more detailed information on our cybersecurity solutions, please visit our dedicated page: Cybersecurity.