DDoS tries to exhaust bandwidth or application capacity so legitimate users cannot connect.

How volumetric attacks work

Attackers flood the network path with junk traffic until routers or the origin server saturate.

Application-layer pressure

HTTP floods look like real visitors and are harder to filter without rate limits and bot detection.

Practical defenses

  • Network filtering and scrubbing upstream
  • Rate limiting at the edge
  • Caching static assets aggressively
  • Keeping software patched

Summary

No single control stops every attack. Defense in depth keeps downtime short when volume spikes.