How can a Web Application Firewall (WAF) help mitigate DDoS attacks?

A WAF analyzes HTTP traffic and can identify and block malicious requests associated with application-layer DDoS attacks, such as HTTP floods. It filters out bad bots, protects against common web exploits, and can be configured with rules to mitigate specific attack patterns. It doesn't typically handle volumetric attacks effectively on its own.