I've published an article on the Cloudflare blog:

• https://blog.cloudflare.com/the-root-cause-of-large-ddos-ip-spoofing/