Ask HN: How is DDoS protection implemented?