The only way to avoid damaging DDoS attacks is to have zero vulnerabilities.
Zero Visibility
Initial Protection Coverage
Auto-Protection