@Are0h i haven't had to fight off a ddos, not sure what's out there. i wonder how far you would get with fail2ban + aggressive nginx caching?