Source ip addresses can be spoofed. And because of IPv6 it is not enough to keep a look-up table of ip addresses that are excluded from visiting a website, because with ipv6 there are now enough ip addresses for a single sender to spoof to send quintillions of probing requests at a webserver.
Given this, what are newer methods of mitigating rotating IP forwarded DDOS probes of a web server?
Is the only solution to white list individual registered user's ip addresses and also to ____ ?