It is probably best to contact your server provider and let them about an attack and ask them if their DDOS protection will really work. Some companies say they offer it, but don't. So, it is good to double check on that.