nekomata_saren@tg says to 電訊台
結論: upstream夠大 + hardware firewall夠勁 = anti ddos