You have to choose good defaults. For some systems, that's fail open. For others, it's different. I'd also begin to ask "are there solutions that are futher ups

You have to choose good defaults. For some systems, that's fail open. For others, it's different. I'd also begin to ask "are there solutions that are futher upstream and/or lower on the OSI model where we could handle this level of overwhelm?"