I was thinking more like Hagrid
I ban on IP separately from the GUID, run the whitelister, it's fairly stable but does crash sometimes, there's also no support for multiple instances which is painful and if I set it to whitelist everyone that joins it tends to whitelist the people that come in just to destroy everything . That's why we leave it on all the time and ask users to register online.
We have at least 1x admin active pretty much at all times, though the tools they use are rather limited, I've found bliss admin to be the easiest for them to use, however it's not really maintained. I don't bother with log parsers, as mentioned the vast majority of the time there's nothing in the logs.
Hardware wise including bandwidth we probably run some of the best kit out there, though we can only do it as we run other game servers as well which helps to pay for it all (we own our own hardware).
The latest issues we have is once people get caught cheating and banned they then DDoS port 2302. Each of our hardware node runs dual gigabit ethernet ports that connect back to 10Gbps uplinks, however that doesn't really matter as it doesn't take much for arma to stop responding to requests and boot everyone.
Here's one such example which maxed out one of the ports (
95.211.186.68 => 948.4 Mbps), the attacks actually register up around 4Gbps on the switch, sometimes more.