Second large Hetzner outage in a week caused by DDoS attack

I thought OVH and Hetzner were the source of a ton of these DDoS attacks. Their IP ranges always seem to be in abuse logs.<p>Cloudflare write in a recent attack:<p>The top networks included the German provider Hetzner Online GmbH (Autonomous System Number 24940), Azteca Comunicaciones Colombia (ASN 262186), OVH in France (ASN 16276), as well as other cloud providers.<p><a href="https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;15m-rps-ddos-attack&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;15m-rps-ddos-attack&#x2F;</a>

At their size, don’t they have some kind of hardware-level packet filtering ability like cloudflare to protect against these attacks?

I am wondering what the attacker&#x27;s intent is

Last time it took about 9 hours: <a href="https:&#x2F;&#x2F;status.hetzner.com&#x2F;incident&#x2F;129728ce-ba25-49b6-96cc-aafcd39ab0b7" rel="nofollow">https:&#x2F;&#x2F;status.hetzner.com&#x2F;incident&#x2F;129728ce-ba25-49b6-96cc-...</a>

Anyone know if it is possible to mitigate the impact of Hetzner blocking UDP traffic on port 9000+? These outages whacked our Kubernetes clusters (Calico + vxlan + Wireguard). <a href="https:&#x2F;&#x2F;serverfault.com&#x2F;questions&#x2F;1100482&#x2F;how-to-limit-udp-port-range-with-k8s-calico-wireguard" rel="nofollow">https:&#x2F;&#x2F;serverfault.com&#x2F;questions&#x2F;1100482&#x2F;how-to-limit-udp-p...</a>

Excuse the ignorance, but couldn&#x27;t ISPs block the attacks?

&gt;This concerns UDP traffic on port 9000-65535.<p>Does anybody know what usually runs on those ports?

[spiderman-pointing-at-spiderman.gif]<p>seriously, aren&#x27;t they commonly the SOURCE of many DoS attacks...<p>any hosting provider where some random person on the internet and $5 of credit on a prepaid visa card will have this problem.

Maybe, just maybe, rely less on embedded framework on embedded framework that spit JavaScript that gets 95% unused. If for a simple outage apology page the output was 1.7MB, I can only imagine for their normal pages how much it is. At this size I feel only like 10k legit users would unwillingly do the outage anyway. But hey, Kubernetes and Node.js is all the rage nowadays.