Thesis from an expert: "Cloud hosting is adequate protection for beginners from DDOS" - I doubt it!?

Question

DDoS Protection

I recently spoke with an expert - a person who has made more than a dozen of his own web projects, including those that can piss someone off. We started talking about DDOS. At the same time, the expert announced the following thesis:

1) If you are a large company, etc., then, of course, you will have to protect yourself from DDOS with hardware (routers and / or placement in special data centers of companies offering DDOS protection services).

2) However, if you are the most ordinary SaaS startup, and your competitors just want to spoil your competitors by paying an inexpensive DDOS in your direction, timed to coincide with the release of your product, then just choose a normal cloud hosting and don’t worry at all! No one will pay for serious botnets “for you”.

I am just starting to understand this topic, so I did not argue with him, but I doubted. My question is: is the expert really right? And if partially wrong, please explain in what way. Thank you!

Answer 1

No, cloud hostings, in case of any problems (for example, a lot of UDP in your direction), do a null route over IP.
Formally, they filtered out parasitic traffic by 100%, but not parasitic either.

Answer 2

To protect against attacks, there are services like CloudFlare or Kaspersky Lab.

Answer 3

A big ddos ​​costs tens of thousands of dollars a day, if you have a blog then there is simply no economic sense to ddo it.
DDoS is still an economic measure and has a financial basis.

Answer 4

The thickness of the channel and the power of the hosting, of course, have an effect, but this is not enough even for an ordinary inexpensive DDoS bought on a hacker forum for a penny. More important is the hardware part of countering DDoS at the provider. In this regard, I like 1&1 (not advertising, the fact of many years of use) where the treshold of IP address blocking is quite reasonably configured. True, a couple of times over the years I had to call the support and ask to reset the blocking, when the load from one IP increased sharply due to a rush in the office)