Reflection-amplification attack
Attacker
src IP = Victim
Reflector 1
DNS / memcached / ...
Reflector 2
DNS / memcached / ...
Reflector 3
DNS / memcached / ...
Reflector 4
DNS / memcached / ...
Victim
overwhelmed
tiny spoofed requests
amplified responses
(up to ~50,000×)