Know how many connections your database can hold without dying. You also want to know if you have the opportunity to failover or cluster websites, DNS, etc. to push the load of traffic to other sites or distribute the traffic to where you want it. Knowing what you have in your arsenal will come in handy when you’re attacked. You can also deploy on-premise devices that are primarily used to protect your network and applications against a DDoS attack. These devices inspect the traffic coming into your network and mitigate bad traffic once it is identified; however, the issue here has to do with what happens when the load is too much for that system, the routers and/or your Internet connection.
There are many things that can be done with existing network infrastructure to protect against network-layer attacks. Network equipment, which is already heavily taxed with production traffic, is vulnerable to minimal increases in traffic, causing availability disruptions. AlgoSec, a leading provider of network security policy management, offers five tips for defending against a DDoS attack.