DoS Mitigation
max-src-states and max-src-nodes

Works with 'source-tracking'
states tracked by source IP
max-src-states limits states per source
max-src-nodes limits number of sources