Mitigating DNS Reflection Denial-of-Service Attacks

Currently, we have been seeing an uptick in the number of denial-of-service attacks using DNS reflection or amplification. There are many variants, but the general outline of the attack is the same: An attacker creates a DNS query with a fake source IP address – that of the intended victim. (Consider this as being analogous…