DDoS volumetric attack

Pager fires: edge ingress bandwidth jumps from a steady 4 Gbps to 90 Gbps in under two minutes, and p99 latency for legitimate users goes from 80ms to timeouts. Your CDN dashboard shows the bulk of traffic is UDP reflection (DNS and NTP source ports) aimed at a single /32 origin IP, plus a smaller layer-7 flood of GET requests to an expensive search endpoint. The attack started 6 minutes ago; no deploy, no marketing event. You're the on-call SRE for edge infra. Triage and mitigate.