How do amplified reflection attacks work at the L3/L4 level?

Amplified reflection attacks leverage network protocols that allow for spoofed source IP addresses. Attackers send requests to vulnerable servers (e.g., DNS, NTP) with the victim's IP address as the source. These servers then send much larger responses back to the victim, amplifying the attack traffic volume.