You can try to mitigate some effects of a DDoS, like the use of CPU when responding to TCP packets (because the CPU tries to respond to every packet coming in) However, this was a UDP based attack which makes it difficult to determine which packets are good and which are not. Really, a true DDoS is nearly impossible to block completely, just have to have a big enough pipe and CPU to handle the packets or distribute the load (preferably geographically as well).
|