Since we are regularly the target of DDoS attacks on rather small scale (below 10GB/s) we have compared a number of machines:

http://dev.esl.eu/blog/2010/09/10/in-search-of-the-anti-ddos...

Just having one of these machines won't solve all of your problems, but it can certainly help.