I didn't say it was easy. I just have the impression that nobody is even really trying to do anything about it Internet-wide. Instead we just have protection as

I didn't say it was easy. I just have the impression that nobody is even really trying to do anything about it Internet-wide. Instead we just have protection as a service (Cloudflare, etc.) which provide protection but do not actually solve the problem. (... and I wonder if these DDOSes are going to get big enough to take them down eventually?) Source quench would help. It's not a silver bullet but it would make this a lot harder. In many cases (including ours) there are ways to ID legitimate traffic vs. junk.