The only mitigation technique that is smart from these types of attacks is to dam them at the sting or Main network or simply at the carrier already.That’s great you define that OpenVZ providers may use significantly less potent servers than KVM, it’s some thing to be aware of and to check. Never ever checked this, as my OpenVZ providers apart