[yizhang7210]

But that would incur a proportionally large cost on the infra I assume? Being able to cutoff DDOS at a gateway level by some sort of filter criteria would still be quite useful imo.