What is DNS amplification and why is it a dangerous DDoS attack?

DNS amplification is a type of DDoS attack where attackers send small queries to publicly accessible DNS servers with spoofed source IP addresses. The DNS servers respond with much larger replies, amplifying the attack traffic directed at the victim. This makes it highly effective because it uses legitimate infrastructure to launch the attack.