ASR 1001-x comes with 2.5 default throughput, We are planning to terminate 10G link on ASR1001-x but we have legit traffic only 1G but sometime we getting 5GB around DDoS so if i use ACL to drop that bad traffic on ingress interface in that case how ...