If the attack is over 10Gbps good luck with that... This stuff is best effort.

I don't think so, 2years ago they mitigated 180gbps on one client.

https://twitter.com/olesovhcom/status/386563685805617152/pho...

https://www.ovh.com/ca/en/anti-ddos/ddos-attack-management.x...

Also everyone here talk about L7, cloudflare ect.. but a lot of application are pure TCP/UDP based so you can't cache anything.

I'd bet that 'one client' getting the ~200gbps DDoS has a massive monthly bill (likely hundreds/thousands of servers) so they're happy to mitigate short term DDoS.

Most dedicated server providers won't go that far if you have a handful of servers.

Which VPS providers are you referring to?

I know from personal experience that, Digital Ocean, the largest VPS provider null routes your VPS IP for 3 hours minimium for even the tiniest of DDoS's.

I doubt most of the smaller VPS providers can afford to absorb DDoS's even if they don't have overly restrictive policies like DO.

I was thinking about these providers:

buyvm.net for 3$ per month (100Gbit apparently)

iwstack.com, 8Gbit protection for free

ramnode.com, 20Gbit