I think there would be many type of DDOS.
1) tcp/udp traffic saturation : no connection to MN
- take down MN one by one.
- Some VPS provider has weak point in here.
- Some VPS provider will null route the ip of MN.
- If target is selected MN(getblocktemplate), each block has different selected...