So are there any ways to mitigate a DDoS attack, aside from throwing money at it by buying a large pipe? Null routing/ taking the site offline doesn't sound like a solution.