Volumetric attack
A DDoS attack that simply floods a target with more traffic than its network connection can handle.
Why raw bandwidth matters here
A volumetric attack is a numbers problem before it is a configuration problem. If the incoming traffic volume exceeds what the network link into the server can physically carry, no server-side rule can let legitimate traffic through, because it never arrives in the first place.
Where mitigation actually happens
Because the bottleneck sits at the network level, effective mitigation typically happens upstream, at the hosting provider or through a specialized scrubbing service, rather than through any configuration change made on the server itself.
Frequently asked questions
Is a volumetric attack the same as a DDoS attack?
A volumetric attack is one specific type of DDoS attack, focused on raw traffic volume, alongside protocol attacks and application-layer attacks which work differently.
Can adding more server resources fix this?
Rarely on its own. If the attack exceeds the network connection's capacity, additional CPU or memory on the server does not help, since the traffic never reaches the point where those resources would matter.
How is a volumetric attack usually measured?
In bits per second or packets per second, describing the sheer scale of traffic being sent at the target rather than anything about its content.
Want to see where your own server stands?
Run the free, read-only server check, or open the Security Lab and watch the detect, contain, recover, verify loop in action.
Get your free server checkOpen the Security Lab