The only real mitigation technique that makes sense against a lot of these attacks is to dam them at the edge or Main community and even in the provider already.There are numerous other ways to virtualize a bare-metal server to turn it right into a host process (1Gbps port velocity or much better recommended in addition to a redundant RAID-10 array