What is the defense against a denial of service attack?
The only thing you can do is call your upstream provider and ask them to null route the traffic, of course, this still leaves you down, but if you have other services running on different addresses, at least they will be able to function. Someone has to absorb the traffic, normally you leave it to the big guns (The upstream providers like Sprint, ATT, etc)