The Day Our Own Queries DoS’ed Us: Inside Zalando Search

Once upon a time, during a normal Sunday, our team ran into an unexpected challenge: an Elasticsearch cluster that suddenly became sluggish and unresponsive due to a self-inflicted Denial of Service (DoS) attack (of course we didn’t know it at the time). This is the story of how we identified, mitigated, and learned from this incident.