A volumetric DDoS attack aims to exhaust a target’s bandwidth or network capacity by sending massive amounts of traffic. The goal is not usually to break an application directly, but to flood the pipes, load balancers, routers, or internet links until legitimate users cannot reach the service.
This matters because availability is often the first security property to fail during an attack. Volumetric DDoS is common in botnet-driven campaigns and DDoS-for-hire services, where many compromised devices or rented attack resources create enough traffic to overwhelm defenses. Defenders respond with upstream mitigation such as traffic scrubbing, anycast distribution, adaptive filtering, and coordination with ISPs or cloud providers. Monitoring baseline traffic, rate spikes, and unusual packet patterns helps detect these attacks early and distinguish them from ordinary usage surges.