You must have excess bandwidth in order to absorb the flood or your upstream transit provider(s) need to filter the attack.