It is apparent that DDoS attacks are becoming increasingly commonplace, according to a research published by Akamai at the end of 2015. It used to be technically difficult to launch a D(D)oS attack, but now it's possible to rent a botnet of tens or even hundreds of thousands of infected or "zombie" machines relatively cheaply and use these zombies to launch an attack. And as the Internet develops, home or office computers that have become zombies can make use of increasingly high bandwidth Internet connections. GÉANT, the pan-European network serving 50 million users in almost 10,000 institutions, is a network with terabit capacities which witnesses close to hundreds of D(D)oS attacks on a daily basis. The question now is, how to deal with DDoS, how to detect and stop them and how to learn from them. One thing is certain, and that is that there is no single entity or ISP that would have said "no" to a second hand during a decent sized DDoS. GÉANT takes a leap forward and admits that too, it cannot battle with giant zombie botnets. In that sense, GÉANT "cheats" and seeks for allies in the NREN (and not only) community to battle against DDoS. But this has its own challenges as well. To keep up with its demanding users, network and its systems has built the next generation mitigation into the core. Today’s measures and controls must meet and surpass tomorrow’s attacks. As such, we’ll demonstrate how GÉANT has become a leader in how to protect and facilitate research and education in today’s world using cutting edge tools.