> I wonder if this sort of thing could be honeypotted? One method could be to anycast the domain to a bunch of edge servers which all relay traffic to the actu

> I wonder if this sort of thing could be honeypotted? One method could be to anycast the domain to a bunch of edge servers which all relay traffic to the actual server. DNS queries of the domain return the closest edge which gets attacked, other edge servers can still route.