Don't have an account? Sign up
If you're already signed up, please sign in
DNS Amplification — a reflection DDoS technique that sends small DNS queries with a victim's spoofed source address to elicit much larger responses toward the victim.
The attack exploits trust in DNS, caching behavior, or the size difference between queries and responses. Mitigation requires a combination of DNSSEC validation, restricted recursion, source-address filtering, rate controls, and resilient infrastructure.
DNS Amplification — a reflection DDoS technique that sends small DNS queries with a victim's spoofed source address to elicit much larger responses toward the victim.
An attacker attempts to forge a DNS answer, place false data in a cache, or use DNS servers to amplify traffic toward a victim. The exact technique depends on the attack type.
Disable open recursion, keep DNS software updated, use DNSSEC validation where applicable, limit abusive queries and responses, deploy source-address filtering, and monitor anomalous traffic.
