The only real mitigation strategy that is smart against these kinds of attacks is to dam them at the edge or core community and even in the provider already. netfilter iptables (soon to get replaced by nftables) is a person-Place command line utility to configure kernel packet filtering procedure