olemus
ummistusrünne, mis saadab halvasti konfigureeritud nimeserverile võltsitud DNS-päringuid, milles on ohvri aadress:
- kuna nimeserver saadab väikesele päringule palju mahukama vastuse, ummistab vastuste tulv ohvri võrguühenduse

täpsemalt
https://www.youtube.com/watch?v=xTKjHWkDwP0

http://meetings.ripe.net/ripe-52/presentations/ripe52-plenary-dnsamp.pdf

https://www.incapsula.com/ddos/attack-glossary/dns-amplification.html

http://crt.io/DNS-Amplification-Attacks.pdf

https://www.us-cert.gov/ncas/alerts/TA13-088A

tõrje
http://support.simpledns.com/kb/a203/what-is-a-dns-amplification-attack-and-how-to-mitigate-it.aspx

https://www.nlnetlabs.nl/downloads/publications/report-rrl-dekoning-rozekrans.pdf

https://deepthought.isc.org/article/AA-00897/0/What-is-a-DNS-Amplification-Attack.html