{"title":"What is a DNS Amplification Attack? (DDoS Reflection)","description":"A DNS amplification attack spoofs the victim's IP to trigger massive reflected responses from open resolvers, using EDNS0's larger buffer sizes (up to 4096 bytes) to turn a 60-byte request into a 3,000-byte response, roughly 50x amplification. Mitigation includes Response Rate Limiting, closing open recursion, and upstream scrubbing.","url":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection","locale":"en","alternates":[{"locale":"en","url":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection"}],"properties":{"og:site_name":"NameSilo Blog","og:type":"article","og:title":"What is a DNS Amplification Attack? (DDoS Reflection)","og:description":"A DNS amplification attack spoofs the victim's IP to trigger massive reflected responses from open resolvers, using EDNS0's larger buffer sizes (up to 4096 bytes) to turn a 60-byte request into a 3,000-byte response, roughly 50x amplification. Mitigation includes Response Rate Limiting, closing open recursion, and upstream scrubbing.","og:url":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection","og:locale":"en_US","og:image":"https://www.namesilo.com/blog/api/media/2291314936bfc1386a0c35e4.png","og:image:secure_url":"https://www.namesilo.com/blog/api/media/2291314936bfc1386a0c35e4.png","og:image:alt":"Illustration showing small spoofed DNS requests being amplified by open resolvers into a large DDoS traffic flood targeting a victim server.","article:published_time":"2026-10-08T04:26:34.852Z","article:modified_time":"2026-10-08T04:26:52.746Z","article:section":"DNS","og:image:width":"1400","og:image:height":"400"},"names":{"description":"A DNS amplification attack spoofs the victim's IP to trigger massive reflected responses from open resolvers, using EDNS0's larger buffer sizes (up to 4096 bytes) to turn a 60-byte request into a 3,000-byte response, roughly 50x amplification. Mitigation includes Response Rate Limiting, closing open recursion, and upstream scrubbing.","robots":"index,follow,max-image-preview:large","twitter:card":"summary_large_image","twitter:title":"What is a DNS Amplification Attack? (DDoS Reflection)","twitter:description":"A DNS amplification attack spoofs the victim's IP to trigger massive reflected responses from open resolvers, using EDNS0's larger buffer sizes (up to 4096 bytes) to turn a 60-byte request into a 3,000-byte response, roughly 50x amplification. Mitigation includes Response Rate Limiting, closing open recursion, and upstream scrubbing.","twitter:image":"https://www.namesilo.com/blog/api/media/2291314936bfc1386a0c35e4.png","twitter:image:alt":"Illustration showing small spoofed DNS requests being amplified by open resolvers into a large DDoS traffic flood targeting a victim server.","author":"NameSilo Staff"},"localeAlternates":[],"jsonLd":{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://www.namesilo.com/#organization","name":"NameSilo","url":"https://www.namesilo.com"},{"@type":"WebSite","@id":"https://www.namesilo.com/blog#website","url":"https://www.namesilo.com/blog","name":"NameSilo Blog","publisher":{"@id":"https://www.namesilo.com/#organization"}},{"@type":"WebPage","@id":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection#webpage","url":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection","name":"What is a DNS Amplification Attack? (DDoS Reflection)","description":"A DNS amplification attack spoofs the victim's IP to trigger massive reflected responses from open resolvers, using EDNS0's larger buffer sizes (up to 4096 bytes) to turn a 60-byte request into a 3,000-byte response, roughly 50x amplification. Mitigation includes Response Rate Limiting, closing open recursion, and upstream scrubbing.","inLanguage":"en","isPartOf":{"@id":"https://www.namesilo.com/blog#website"},"breadcrumb":{"@id":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection#breadcrumb"},"primaryImageOfPage":{"@type":"ImageObject","url":"https://www.namesilo.com/blog/api/media/2291314936bfc1386a0c35e4.png","caption":"Illustration showing small spoofed DNS requests being amplified by open resolvers into a large DDoS traffic flood targeting a victim server."},"mainEntity":{"@id":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection#article"}},{"@type":"BreadcrumbList","@id":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"NameSilo Blog","item":"https://www.namesilo.com/blog/en"},{"@type":"ListItem","position":2,"name":"What is a DNS Amplification Attack? (DDoS Reflection)","item":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection"}]},{"@type":"BlogPosting","@id":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection#article","url":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection","headline":"What is a DNS Amplification Attack? (DDoS Reflection)","description":"A DNS amplification attack spoofs the victim's IP to trigger massive reflected responses from open resolvers, using EDNS0's larger buffer sizes (up to 4096 bytes) to turn a 60-byte request into a 3,000-byte response, roughly 50x amplification. Mitigation includes Response Rate Limiting, closing open recursion, and upstream scrubbing.","inLanguage":"en","mainEntityOfPage":{"@id":"https://www.namesilo.com/blog/en/dns/what-is-a-dns-amplification-attack-ddos-reflection#webpage"},"author":{"@type":"Organization","@id":"https://www.namesilo.com/#organization","name":"NameSilo","url":"https://www.namesilo.com"},"publisher":{"@id":"https://www.namesilo.com/#organization"},"datePublished":"2026-10-08T04:26:34.852Z","dateModified":"2026-10-08T04:26:52.746Z","image":{"@type":"ImageObject","url":"https://www.namesilo.com/blog/api/media/2291314936bfc1386a0c35e4.png","caption":"Illustration showing small spoofed DNS requests being amplified by open resolvers into a large DDoS traffic flood targeting a victim server.","width":1400,"height":400},"articleSection":["DNS"],"timeRequired":"PT4M"}]},"jsonUrl":"https://www.namesilo.com/blog/llms.json?path=%2Fblog%2Fen%2Fdns%2Fwhat-is-a-dns-amplification-attack-ddos-reflection"}