The only mitigation tactic that makes sense towards these kind of attacks is to dam them at the edge or Main network or maybe on the carrier previously.That’s great you determine that OpenVZ providers could use a lot less powerful servers than KVM, it’s some thing to find out and to examine. Under no circumstances checked this, as my OpenVZ pro