content: Only Amazon offers complete DDOS protection by swallowing all that traffic on their ACL layer for you, inbound traffic is free, however even they will begin to charge money for the traffic once you see attacks sustained over 100GBps that go on for days, which will be very costly, unable to afford it and they will do what the competition do much earlier and at lower volumetric attack rates.  Most "free DDOSS protection" will protect up to 1GBps and then they will NULL route your site, which makes the site unuseable able to be visited by anyone If you're a serious about DDOS, buy a Corero or Arbor anti DDOS server appliance. This will allow you to route 99% of all the DDOS traffic to NULL so that it does not effect your site. You can turn 100GBPS attacks into less then a few hundred megabyte attacks making the site still visit able for everyone and without slowdowns. The problem is that the appliance will cost you 250K usd and requires a datacenter. This is where innovation by the techies needs to happen, because in essence it's just a server with a built in switch with some custom software on it that does packet filtering. It's very much a monopoly and they need to be replaced by innovation.