A DDoS attack attempts to overwhelm a website, application or network service with traffic from many sources. Effective mitigation may involve upstream filtering, rate controls, traffic analysis, CDN or edge protection and capacity planning.
What to consider
Different attacks target different layers, so a single firewall rule may not be enough. Infrastructure providers can help absorb or filter high-volume traffic while application-layer controls address abusive requests that appear legitimate.
Businesses should combine DDoS protection with external uptime monitoring, incident procedures and clear escalation paths so availability problems can be detected and handled quickly.