This is not true. The reality is that they have never had a "secret strat" for dealing with DDoS attacks except to pass the buck to their customers. And the lac

This is not true. The reality is that they have never had a "secret strat" for dealing with DDoS attacks except to pass the buck to their customers. And the lack of a clearly defined policy, combined with their exorbitant bandwidth costs, has made it far too dangerous to anyone without a massive budget to build services on their infrastructure. They have decided to "resolve" this problem by using it as an opportunity to further gouge their customers on bandwidth (which is already 12x+ more expensive than market rate for IP transit), instead of absorbing it into their existing cost structure. Which still would have meant their bandwidth was overpriced, and still would be way higher than what you can get pretty much everywhere else. For a contrast, OVH provides this protection as an included feature in all of their offerings. Before everyone writes it off as junk in comparison to the glorious AWS black box (AWS is amazing at marketing), bear in mind that the OVH scrubber just took a terabit DDoS attack against it and survived: http://www.securityweek.com/hosting-provider-ovh-hit-1-tbps-ddos-attack http://www.securityweek.com/hosting-provider-ovh-hit-1-tbps-... OVH correctly realizes that the only way to solve this problem is to make sure everybody gets access to it. Otherwise you're just encouraging the democratization of censorship for those without the means to protect themselves against it. I hope the "cloud" providers follow their example.