Distributed denial of service attacks are on the rise and their size and scope increases with each attack. From the recent attacks on Sony by the Lizard Squad, to attacks against a variety of DNS providers, including DNSimple, 2014 was a tough year for infrastructure service providers and consumer-facing services alike. In this talk I will describe various types of DDoS attacks, how and why attackers use them and how you can defend against them. I will talk in detail about the attacks we saw in 2014 at DNSimple, how we detected them and how we are dealing with them. Finally, I'll talk about the future of DDoS defense and the challenges we face in 2015 and beyond.