Volumetric vs Application-Layer DDoS
Different attacks need different defences. Understand the layers and how to protect each.
DDoS attacks come in different forms, targeting different layers of the network stack. Understanding the types helps you choose the right defences.
Volumetric attacks (Layer 3/4)
These attacks overwhelm bandwidth by sending massive amounts of traffic, often using amplification techniques that exploit open servers to multiply traffic. Measured in gigabits per second, they saturate internet links.
Defence: network-level mitigation in the provider's network with large scrubbing capacity.
Protocol attacks (Layer 3/4)
These exploit weaknesses in network protocols, such as floods of connection requests that exhaust firewall or server connection tables.
Defence: network mitigation, protocol validation and properly sized firewalls.
Application-layer attacks (Layer 7)
These target specific applications with seemingly legitimate requests — for example, repeatedly loading search pages or login forms. They can be low in volume but expensive for servers to process.
Defence: web application firewalls, rate limiting, bot management and caching.
Multi-vector attacks
Many attacks combine methods, switching tactics to evade defences.
Layered protection
Effective protection combines network-level mitigation for volumetric and protocol attacks with application-layer defences for websites and APIs.
Monitoring at each layer
Monitor bandwidth, connection counts and application response times to detect different types of attacks.
Application design
Efficient code, caching and scalable architectures make applications more resilient.
The bottom line
Use network protection for volumetric attacks and application defences for Layer 7. Together, they cover the full range of DDoS threats.
Learn more about DDoS Business Protect from UbiFi, or talk to our team.
Always-on DDoS detection and mitigation that keeps your websites, portals and VPNs online during attacks.
