Cloudflare recently introduced a product that seemingly can protect arbitrary TCP-based traffic (https://www.cloudflare.com/products/cloudflare-spectrum/ https:

Cloudflare recently introduced a product that seemingly can protect arbitrary TCP-based traffic (https://www.cloudflare.com/products/cloudflare-spectrum/ https://www.cloudflare.com/products/cloudflare-spectrum/), haven't used that myself though, it seems to not be part of the standard offering for now. Some of the simpler DDoS attacks can be mitigated by kernel settings and iptables (see e.g. https://javapipe.com/blog/iptables-ddos-protection/ https://javapipe.com/blog/iptables-ddos-protection/), but that won't help you much against larger attacks.