A lot of people focus on web app attacks, but a massive layer 4 ddos can literally saturate your bandwidth in seconds. We learned this the hard way when our pipes choked on a SYN flood. You really need a provider that scrubs this deep at the network edge before it even reaches your data center. It saved our infrastructure from completely melting down during peak hours.
