What is a volumetric DDoS attack?
Volumetric attacks are the best-known DDoS category: they aim to saturate the victim's bandwidth with a huge volume of traffic, measured in Gbps or Tbps. They include reflection and amplification techniques (DNS, NTP, Memcached, SSDP) and UDP or ICMP floods. The goal is simple: fill the pipe until legitimate traffic no longer fits.
How are these volumes generated?
By combining botnets of thousands of devices with amplification techniques that multiply every byte sent. This lets attackers with modest resources generate hundreds of gigabits per second capable of saturating even robust enterprise links.
How to defend against it?
The only realistic defense against high volumes is edge mitigation: anti-DDoS services with distributed network capacity (scrubbing centers) that absorb and clean traffic before it reaches the origin. Rate limiting, filtering of abused protocols, and bandwidth over-provisioning complement it.
