Firewalls can’t stop these types.
Cisco has had DDoS mitigation appliances since at least 2004. Competitors have them, too. I couldn’t vouch for how effective they are, though.