Ideally, relays should implement the Tor network's pow system, which has been quite effective in stopping ddos attacks.