1. Cloudflare offer TCP based DDoS protection too, see their Magic Transit or Spectrum product
2. This sucks, but put your servers behind WireGuard or Tailscale VPN so that in order to connect you need to have authenticated
1. Cloudflare offer TCP based DDoS protection too, see their Magic Transit or Spectrum product
2. This sucks, but put your servers behind WireGuard or Tailscale VPN so that in order to connect you need to have authenticated