ddos gonna escalate in my opinion,we must implement some countermeasures,like udp and icmp filtering or engress filtering...