In reply to Arsalan Iqbal.

I agree 100%. It must be done as a defense in depth mitigating the threat as close to the source as possible to minimize collateral damage. That means that for some DoS oriented threats that originate from the inside and not the outside, for example, an "on prem" solution is quite a valid and often deployed option. Good for you to point this out!