
480 Networking Explained, Second Edition
19. How do you combat a DDoS attack?
Although some DDoS attacks can be stopped, it depends on the type of attack. For
example, some DDoS attacks have specific profiles and use specific protocols, which can
be detected by firewalls and, in some cases, router filters. Some types actually generate
what appears as legitimate traffic to the network. These “legit” traffic profiles are
extremely difficult to detect and defeat. As a result, the only option for some types of
attacks is placing packet rate limiters on routers. A packet rate limiter is a type of router
filter that detects certain elevated traffic levels for specific ...