DRDoS

A Distributed Reflection Denial of Service attack sends requests to legitimate internet servers while spoofing the victim's address, causing those servers to flood the victim with responses. Protocols that answer small queries with large replies amplify the attack, multiplying its bandwidth many times over. DRDoS matters because it lets attackers generate massive floods, and it is mitigated by anti-spoofing filtering and hardening reflectable services.