You can defend on your own HW, using several methods:

  -A proxy, e.g. Cloudflare

  - A fat link, e.g. 100Gbps Cogent + a good hardware firewall (completely independent scenario)

  - Use a GPRE tunnel based mitigation, if you own your own AS number, e.g. by Verisign