I've gone ahead and created one: http://serverfault.com/questions/531941/i-am-under-ddos-what-can-i-do I think it's pretty comprehensive, but of course I'm sure it can be improved upon. Let's close a bunch of things as a duplicate of it.