You only mitigate attacks you don't stop them. You either get massive uplinks (multi 10GE) and cisco nexus (or similar) or proxy/spread/diversify across multip

You only mitigate attacks you don't stop them. You either get massive uplinks (multi 10GE) and cisco nexus (or similar) or proxy/spread/diversify across multiple facilities separate to the core and only forward legit traffic (or null route targetted proxies).