I have watched more than one team pick a DDoS provider based purely on a big capacity number on a marketing page, only to get genuinely caught out months later by a smaller, faster attack that number was never protected against. Capacity matters, but it is not the whole story, and providers spend a ...