[Thaxll]

anycast + lot of bandwidth are the best solution against DDoS.

[aroch]

There comes a point where there isn't enough bandwidth you can buy...Reflection and amplification attacks can, very quickly, generate in the 100's of Gbps worth of traffic. IT simply isn't economical to keep that much bandwidth at hand all the time.