I'm afraid there is no possibility to avoid DDoS, it is possible only to handle this. If our anti-DDoS detects attack, it start filtering out wrong traffic, however, sometimes good packets are also rejected due to false positive triggers. For this reason we always advice to use your own local or third party measures along with our protection.