that's not the only way. The way we used to do it is have "filter boxes" with a real anycast IP address's which reverse connect to your origin. This helps a l

that's not the only way. The way we used to do it is have "filter boxes" with a real anycast IP address's which reverse connect to your origin. This helps a lot because it keeps a lot of traffic localised instead of allowing it to collect in one place. Anycast should also mean you have a failover mechanism; but if it fails then you're only down in one section of the world where the most bots are anyway, which is usually not as bad as being down globally.