DDoS mitigation is a countermeasure against DDoS attacks where a resource undergoing high amounts of traffics automatically inspects incoming connections and either filters out malicious ones (knows as “scrubbing”) or redirects them to a non-existent endpoint (known as a “blackhole”), in order to not overwhelm the resource. DDoS mitigation then ends when traffic to the resource returns to normal levels.