[cpqq]

Whoever has the most transit wins the mitigation game. You need to take in that traffic, then process it with a shitload of power.

OVH has 3 large datacenter PoPs to absorb attacks and do just that, then push the traffic clean back to your server.

They may blow at support and response times, but once I have a dedicated server from them, their Manager is intuitive enough to get going.

Add the fact I can get 64G server on a brand new E5 chassis with 255 free IPs for VPS of my own, and I've been moving more and more sites there as hosts get arbitrarily hit.

Piss off some competitor or skiddie and you get tested. It's ridiculous, but sadly DDoS mitigation is becoming a must.

Good time to leave being a SysAdmin in cloud and go back to web design full time as I watch a lack of best practices and SPOF take over.

Finally, I backup everything to 2 off-site locations and hope for the best.