What are the limitations of DNS-level DDoS protection?

While effective, DNS-level protection has limitations. It's less effective against application-layer attacks that directly target your application logic. Also, it may not be able to fully mitigate attacks that involve sophisticated routing or bypass DNS resolvers. Furthermore, improperly configured DNS protection can inadvertently block legitimate traffic.