"valid security strategy"

Did you mean reliability? At this point I don't care if my server gets DDoS, but may be more convinced by security practices.