Re: strategies to mitigate DNS amplification attacks in ISP network

[Stepan Kucherenko]

flowspec.

Probably the best method if you have competent engineers and uplinks who 
can give you bgp flowspec.

Makes bandwitdh attacks amusing instead of annoying.