Experience. I know that relay.damus.io, relay.nostr.band, and nos.lol mitigate spam. nos.lol has problems recently but seems to have fixed the issue.