for 100Mb/sec connectivity, you're not going to get much DDoS protection from any sort of firewall. as 100Mb/sec will completely saturate your link and while your firewall might be dropping those packets, it doesn't really matter at that point.
so, simply buy a bandwidth from an upstream that has clueful network engineers who can monitor pps flows on your port and detect and filter anamalous traffic.
-- This message may have been cut off and the rest will only be shown to members. To become a member, click here --