DDoS attacks flood servers with traffic from botnets to disrupt services. Types include volumetric, TCP SYN, UDP, and application-layer attacks. Firewalls filter traffic but have limits. Mitigate with rate limiting, WAF, Anycast, and services like Cloudflare for scalability and proactive defense.