I am building a service, which will use UDP. It will run on Amazon AWS - in the firewall they provide, I can block everything except that one UDP port my service will run.
The only thing I'm concerned about is receiving a massive spam of UDP packets from random spoofed IP addresses on that particular UDP port. If a pool of these spoofed IP addresses would be limited then all of them could be blacklisted on a 3rd party firewall. But if every packet can have random 32-bit IP address, then I can't think of a way to recognize it from a legitimate packet.
Is there even way to defend against such attack?