The issue is: bot nets. The attacks come from multiple sources worldwide. No anonymity, rather a swarm of legitimate hosts sending mass;requests. Research and

The issue is: bot nets. The attacks come from multiple sources worldwide. No anonymity, rather a swarm of legitimate hosts sending mass;requests. Research and development? Network connections come in, one way or another some devices have to filter them in or out. AFAIK it's an arm race. Large bot nets on one side, and hardware optimised to filter out certain requests on the other. It's a simple technique but requires compromising enough networked resources to make the attack effective. Cloudflare and other providers having large capacities are well armed to deflect DDoS that can't overwhelmed them, but even then, they aren't safe from a larger bot net than what their network resource can handle. If someone knows more than I do, maybe they could elaborate on technologies I'm not aware of.