Geoblock does not work against DDos as the traffic still has to hit the site/server first before anything is done. Blocking at the edge routers is the way to go. And they did pay IBM a sheet load of cash to stress/volume test the site in advance - I have no idea what they did for the money.