[nchelluri]

What layers were they on? Lots of traffic means network?

Just hoping you can give a concrete example, as I'm not super familiar with this stuff.

[greenleafjacob]

AWS said at re:Invent 2015 that about 15% of DDoS attacks on AWS were application layer [1]. Some were state exhaustion at 20% (SYN floods, etc.) but the vast majority (65%) were "volumetric" attacks, meaning layer three like DNS reflection and SSDP reflection.

[1] https://youtu.be/Ys0gG1koqJA?t=172

[nchelluri]

Exactly the kind of information I was looking for; thanks.