For caching: Learn how to code. If your web page dies when there are only two visitors, then that's on you. DDoS attack: If possible, the easiest solution is t

For caching: Learn how to code. If your web page dies when there are only two visitors, then that's on you. DDoS attack: If possible, the easiest solution is to just swallow the traffic. If that doesn't work you want to block all networks that allows IP spoofing. Then it's a wack-a-mole game. And if you have the resources, use any-cast and many co-locations. Or ask your ISP for help. Hiding your server: Use onion address via TOR network. SSL certificate: Use Letsencrypt Edge SSL/DNS/CDN: Use a fast web server or proxy, like Nginx. With Cloudflare the connection to the Edge server might be faster, but time to first byte (on your site) often slower. So you get better bang for the buck by optimizing on your end. Note that DNS by itself already have edge caching out of the box, for free! eg. if a user looks up your domain, it will be cached both at their ISP and LAN. So you don't need Cloudflare for DNS.