We recently were hit by multiple DDoS attacks over a weekend. We have our own servers in a data center with 5 redundant 1 Gbps links. The DDoS was 20Gbps accord

We recently were hit by multiple DDoS attacks over a weekend. We have our own servers in a data center with 5 redundant 1 Gbps links. The DDoS was 20Gbps according to the upstream providers. Our upstream implemented layer 7 mitigation which did an unbelievably effective job at stopping the attack in it's tracks. I don't know the tech that they used, but it performs deep packet inspection up to the application layer and they charge a modest additional fee for passing our traffic through that system. The effect was that our traffic dropped to very slightly below normal levels during the attack, which would indicate that there were probably a few false positives, but we didn't have a single customer complaint.