You haven't indicated what the actual inbound attack volume is. If it's something your network core can handle, you can block the attack fingerprint upstream so it does not reach the 1Gb link. If it's UDP amplification chances are you can create a firewall rule. -PK