DDoS auto-mitigation best practices (for eyeball networks)